Windows Desktop: enabled skills-only plugin does not expose bundled skills in fresh tasks

Codex version

• Codex CLI: 0.151.0
• Codex Desktop: 26.825.6671.0
• Platform: Windows 11 x64
• Authentication/provider: ChatGPT account using the official Codex backend

Issue

A valid, installed, enabled, skills-only personal plugin can be explicitly selected in a fresh Codex Desktop task, but none of its bundled skills are exposed in that task's callable skill catalog.

The affected plugin is intentionally skills-only: no MCP server, app mapping, hook, daemon, or connector dependency.

Reproduction

1. Install and enable a personal plugin whose manifest declares:
   • a valid .codex-plugin/plugin.json
   • "skills": "./skills/"
   • no MCP/app capabilities
2. Include two valid skills under that directory, each with agents/openai.yaml and allow_implicit_invocation: false.
3. Validate both skills with the bundled quick_validate.py and validate the plugin manifest with validate_plugin.py; all checks pass.
4. Create a brand-new local Codex Desktop task and explicitly select the plugin using its plugin mention.
5. Inspect the model-visible/callable skill catalog.

Expected behavior

The plugin's explicitly selected bundled skills should appear with the plugin prefix and be callable in the fresh task.

Actual behavior

The plugin is listed by codex plugin list as installed and enabled, and its manifest and skill files validate, but neither prefixed skill appears in the fresh task's callable skill catalog. Repeating the test in a second fresh task produces the same result.

System and other installed skills remain visible, so the task has a functioning skill catalog generally. The missing layer is exposure of skills from this enabled personal plugin.

Evidence

• Plugin status: installed, enabled
• Plugin version: 0.1.0+codex.20260828004922
• Manifest validator: passed
• Skill validator for skill 1: passed
• Skill validator for skill 2: passed
• Fresh-task reproduction: passed twice
• Repository working tree remained clean
• No configuration, permission, or installation changes were made during the reproduction

Privacy

No credentials, tokens, private source content, user paths, or task transcripts are included.

Start by reproducing the fresh-task behavior with the validated .codex-plugin/plugin.json, skills/ directory, and agents/openai.yaml files. Run quick_validate.py and validate_plugin.py, then inspect how an explicitly selected plugin contributes skills to the callable catalog. Done means both prefixed bundled skills appear and are callable in a fresh Windows task.