set-instructions-as-secrettext

set-instructions-as-secrettext is an agent for coding agents from microsoft/BCQuality. It costs 0 tokens per session (260 once invoked), scanned A, original, MIT.

A pattern for storing an agent's instructions as SecretText, which is protected text intended not to appear in ordinary logs or copied strings. The instructions belong to each agent instance rather than the agent type definition.

In plain words
What is it for?
Use it when creating an agent and loading its instruction document into the instance securely.
Why use it?
It reduces the risk of exposing instruction text and allows different companies or instances to have different instructions.

Agent

About the project

microsoft/BCQuality is a structured knowledge base and skills library for Microsoft Business Central development. It records Business Central-specific rules and platform behaviors that coding agents or developers might otherwise get wrong. The catalogue entries provide the agents and skill that consume this guidance.

microsoft/BCQuality · 204 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/microsoft/bcquality/set-instructions-as-secrettext
Clone the repo
git clone --depth 1 https://github.com/microsoft/BCQuality

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for set-instructions-as-secrettext

README.md
[![agentmods](https://agentmods.dev/badge/agents/microsoft/bcquality/set-instructions-as-secrettext.svg)](https://agentmods.dev/agents/microsoft/bcquality/set-instructions-as-secrettext)
Your own site
<a href="https://agentmods.dev/agents/microsoft/bcquality/set-instructions-as-secrettext"><img src="https://agentmods.dev/badge/agents/microsoft/bcquality/set-instructions-as-secrettext.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 260 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.00260
Opus 5 $0.00000 $0.00130
Sonnet 5 $0.00000 $0.00052
Haiku 4.5 $0.00000 $0.00026

Measured yesterday against content hash 7c153a0c4cce, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

set-instructions-as-secrettext scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

community/knowledge/agents/set-instructions-as-secrettext.md · 27 lines

What it actually says

Set agent instructions as SecretText on the instance

Description

Instructions are instance data, not an enum caption. Agent.SetInstructions takes SecretText so the payload is not logged or copied as ordinary text. A Label or plaintext Text on the agent type is the wrong store: it leaks into telemetry-friendly strings and cannot vary per instance or company.

Best Practice

Load instruction text from a resource or builder into a SecretText variable and call Agent.SetInstructions(AgentUserSecurityId, Instructions) after Create. Keep one instruction document per instance.

See sample: set-instructions-as-secrettext.good.al.

Anti Pattern

Passing a Label or Text to SetInstructions, storing instructions in a setup Text field without wrapping as SecretText, or putting the prompt only in a code comment. Detection signal: SetInstructions with a non-SecretText argument, or no SetInstructions after Create.

See sample: set-instructions-as-secrettext.bad.al.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 27 lines · 0 tokens per session scan A 7c153a0c4cce

Subscribe to this mod's changes

set-instructions-as-secrettext is an agent published in the GitHub repository microsoft/BCQuality (204 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 260 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other agents, from other repositories

tech-debt-auditor

Audits the repo for technical debt, quantifies impact/risk, and produces a prioritized remediation plan with small, safe PR-sized recommendations.

jaktestowac/awesome-copilot-for-testers · 35 tokens

playwright-automation-engineer-ts-detailed

Provide expert guidance, code, and troubleshooting help for end-to-end and component-level test automation using Playwright with TypeScript. Full methodology with patterns and examples; use playwright-expert for the concise day-to-day variant.

jaktestowac/awesome-copilot-for-testers · 54 tokens

skill-librarian

Audits a collection of customization assets as a whole rather than one at a time: frontmatter and structural conformance, description trigger quality, overlap and trigger collisions between near neighbours, broken cross-references, orphaned and missing resources, drift between skills, plugins and the README, and which…

jaktestowac/awesome-copilot-for-testers · 119 tokens

test-automation-expert

Help engineers craft robust, fast, and maintainable automated tests that deliver actionable feedback and integrate seamlessly into modern SDLC pipelines.

jaktestowac/awesome-copilot-for-testers · 31 tokens

change-gate-reviewer

Reviews a single diff against the project quality contract: tags the change, scopes only the practices the change makes relevant, verifies diff coverage, checks that high-risk surface carries a recorded rationale, and returns severity-ranked findings with remediation briefs. Use before committing, pushing or opening a…

jaktestowac/awesome-copilot-for-testers · 79 tokens

llm-feature-test-engineer

Designs and implements eval suites, runtime guardrail tests and adversarial prompt-injection suites for LLM-powered features, then wires the regression gate into CI. Use when a product ships prompts, agents or RAG and its quality is currently verified by eyeballing output, when a model or prompt upgrade needs a…

jaktestowac/awesome-copilot-for-testers · 84 tokens