C

Codex Token Watch

premk134/codex-token-watch · unreleased source · 9bfa263 · Development & Workflow

by premk134Owner verifiedScan grade: caution

Read-only macOS CLI that turns local Codex Desktop task logs into per-turn token, prompt-cache, cache-miss, duration, and API-cost analysis

Follow0
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Codex Token Watch a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

What is Codex Token Watch?

Codex Token Watch is a published development & workflow plugin for AI coding agents in the Codex ecosystem, developed by premk134 and distributed through the HOL AI plugin registry. Read-only macOS CLI that turns local Codex Desktop task logs into per-turn token, prompt-cache, cache-miss, duration, and API-cost analysis.

Canonical slug
premk134/codex-token-watch
Version
unreleased source · 9bfa263 · updated Oct 1, 2026

Registry snapshot

Owner verification
Verified on HOL as @premk134
Scanner
Registry fallback scan
Security result
Caution
Digest verified
Yes

Trust and security

Trust & reputation

On-Chain Verified
64

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64/100
Maintenance
30/100
MCP server setup
100/100
Plugin Security
59/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/premk134/codex-token-watch
Source commit
9bfa263caf8c…
Publisher verified
Yes
Owner verified
@premk134

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Caution
Security result
59
Security score
0
High findings
Provider
registry-broker-fallback
Grade
F · caution
Version
Unknown
cisco-skill-scanner: not_applicable

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumpublishabilitypublishability.link.missing.websiteURL

websiteURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

Install guidance

Install in Source

Install from a native release archive or the assessed source revision.

Install guide
  1. 1

    Download the release archive

    Use a published GitHub release archive. The catalog version is the package version at the assessed commit.

    shell
  2. 2

    Follow the publisher install guide

    https://github.com/premk134/codex-token-watch/blob/9bfa263caf8c27b2061127923e5c94961af5a475/docs/INSTALL.md

Did setup work in Source?

No setup reports for Source yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "codex-token-watch",
  "version": "0.0.0",
  "description": "Read-only macOS CLI that turns local Codex Desktop task logs into per-turn token, prompt-cache, cache-miss, duration, and API-cost analysis",
  "repository": "https://github.com/premk134/codex-token-watch",
  "homepage": "https://github.com/premk134/codex-token-watch",
  "interface": {
    "displayName": "Codex Token Watch",
    "developerName": "premk134",
    "category": "Development & Workflow"
  },
  "registryIndexVersion": 5
}

File inventory

.codex-plugin/plugin.json

plugin-manifest

458 bytes

b56738e5a9ffa881…

README.md

file

5,253 bytes

5493ed9c0aaf6396…

README.md

file

5,253 bytes

5493ed9c0aaf6396…

Codex Token Watch — Frequently asked questions

What is Codex Token Watch?
Codex Token Watch is an AI plugin in the HOL registry. Read-only macOS CLI that turns local Codex Desktop task logs into per-turn token, prompt-cache, cache-miss, duration, and API-cost analysis.
How do I install Codex Token Watch?
Install Codex Token Watch in your harness: Source — https://github.com/premk134/codex-token-watch/releases. Full step-by-step guidance is on the HOL plugin page.
How do I install Codex Token Watch in Source?
To install Codex Token Watch in Source, start with https://github.com/premk134/codex-token-watch/releases. The complete step-by-step install guide for Source is on the HOL plugin page.
How is the Trust Score for Codex Token Watch computed?
Codex Token Watch has a HOL Trust Score of 64 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/premk134%2Fcodex-token-watch/trust
Who publishes Codex Token Watch?
Codex Token Watch is published by premk134 and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-10-06 to 2026-10-31.

Reviews and similar plugins