Research report · 20 October 2026
Copywriting: host documentation is not an installed-skill test
Codex and Claude Code each document a way to discover a local SKILL.md folder. Their locations, invocation controls and permission models differ. Neither set of host docs verifies that the maintainer’s named-skill command or one-skill ZIP installs the intended Copywriting files, loads its references, or safely handles a marketing draft.
Two local hosts, four questions
These are documented host capabilities, not observed behavior with this Copywriting package. Codex here means its local CLI/IDE skills, not an API or ChatGPT upload. Claude here means Claude Code, not Claude web upload.
Where is a local skill found?
Codex CLI/IDE: Repo-scoped .agents/skills up to the repo root, $HOME/.agents/skills, /etc/codex/skills or bundled skills; symlinked folders are supported. Skills docs.
Claude Code: Personal ~/.claude/skills/<name>/SKILL.md or project .claude/skills/<name>/SKILL.md, with other documented routes. Skills docs.
How is it invoked?
Codex CLI/IDE: Name/description/path are exposed first; full SKILL.md loads when selected. A user can select via /skills or $name; a description match can invoke implicitly unless disabled by policy. Skills docs.
Claude Code: A user can type /skill-name or Claude may invoke a relevant skill. Frontmatter/settings can change invocation; the body loads on use. Skills docs.
What about supporting files?
Codex CLI/IDE: Folders may contain references/, scripts/ and assets/; supporting files are used when needed. This does not prove the named references are in the installed package. Skills docs.
Claude Code: Supporting files can be read on demand and scripts run. Dynamic shell-context injection and allowed-tools make actual frontmatter, included files and policy material to review. Skills docs.
What can pause or stop access?
Codex CLI/IDE: Sandbox and approval settings determine reachable files/network and pauses. In a documented common workspace-write/on-request profile, inside-workspace reads and routine commands need not pause; automatic review applies only to actions already requiring approval. Approvals; sandboxing.
Claude Code: In Manual/default, in-directory reads generally do not prompt, while Bash, edit and web actions commonly do, subject to exceptions. Modes, rules, allowed-tools, managed policy and OS sandbox change the effective boundary. Permissions; skills.
What the Copywriting sources actually show
Maintainer route claim
The README advertises npx skills add coreyhaines31/marketingskills --skill cro copywriting. The one-skill ZIP design describes one named folder with authored resources and a license; it addresses Claude web upload and says live upload was unverified. Neither statement is an inspected CLI payload, ZIP manifest or Claude Code installation test.
Selected source observation
The mutable selected file displayed metadata 2.3.1 on 20 October. Its selected frontmatter has no allowed-tools; it names three in-folder references and conditionally directs reads of local marketing-context paths. It describes an input-dependent page draft or point edit, claim-support/decline handling and a pre-handoff AI-tells check. This selected text is not a complete current directory or installed-payload audit. A skill instruction does not authorize reading local product data, and a source-directed check does not replace independent proof, rights, CTA or publication review.
Bounded pre-install review
- Pick the host and intended bytesIdentify the exact source revision or release, then enumerate the selected folder or archive manifest, references, scripts, frontmatter, symlinks and paths outside that folder.
- Match destination to host policyCompare the actual install destination with that host’s discovery paths; check implicit invocation, effective sandbox, tool and permission rules. A matching format or path is still only a hypothesis until tested.
- Authorize data and retain human stopsApprove or exclude each marketing-context read and network/tool action. A named marketing owner checks every material claim, proof, rights and exact CTA; the site owner separately decides publication.
Research library · Review a skill · One-skill documentation · Selected-source delta