agentsys AGENTS.md

Project instructions for AgentSys, a plugin that works with five AI coding tools and is used by other software projects.

In plain words
What is it for?
Finding project guidance, recording releases in the changelog, preparing reviewed changes, and following the required workflow for production fixes.
Why use it?
They set priorities for production changes, testing, release notes, pull requests, and reviews so updates do not disrupt plugin users.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/agent-sh/agentsys/agents-md
Clone the repo
git clone --depth 1 https://github.com/agent-sh/agentsys

Made for: Codex, OpenCode.

Per session 3,115 This file is loaded in full into every session.
When invoked 3,115 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.03115 $0.03115
Opus 5 $0.01558 $0.01558
Sonnet 5 $0.00623 $0.00623
Haiku 4.5 $0.00312 $0.00312

Measured 2d ago against content hash 24a2c0b740bd, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

agentsys AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 278 lines

How it starts

The opening of the file, as written. The whole thing — 278 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Project Memory: AgentSys

Cross-tool compatible: Works across all 5 platforms - Claude Code, OpenCode, Codex CLI, Cursor, and Kiro.

  1. Production project - Real users depend on this. Test thoroughly and verify all edge cases before committing. WHY: Breaking changes affect all plugin users immediately.

  2. Plugin for OTHER projects - Optimize for plugin users, not internal dev convenience. WHY: Every decision MUST improve the experience for developers using this in their repos.

  3. Use CHANGELOG.md for completion tracking - MUST use CHANGELOG.md for release notes. NEVER create *_AUDIT.md, *_SUMMARY.md, *_COMPLETION.md files. WHY: Summary files clutter repos and add no value. Report completion verbally.

  4. Unless it is a very small change of max few lines, or an urgent hotfix, MUST create PRs for all changes - No direct pushes to main. WHY: PRs enable reviews, CI checks, and rollback if needed. Direct pushes are risky.

  5. PR reviews - Wait 3 min for auto-reviewers, address ALL comments (Copilot, Claude, Gemini, Codex). WHY: Skipping comments leads to merged issues. Every comment must be addressed or explained.

  6. Read checklists BEFORE multi-file changes - MUST read the relevant checklist before starting:

    • Cross-platform work → checklists/cross-platform-compatibility.md (MASTER REF)
    • Release → checklists/release.md
    • New command → checklists/new-command.md
    • New agent → checklists/new-agent.md
    • New skill → checklists/new-skill.md
    • New lib module → checklists/new-lib-module.md
    • OpenCode plugin update → checklists/update-opencode-plugin.md
    • Repo intel changes → checklists/repo-intel.md WHY: Multi-file changes have hidden dependencies. Checklists prevent missed updates.
  7. Especially Before release, and when delivering ANY work - Check the relevant checklist for completion requirements:

    • Identify which checklist applies to your work (see rule #6)
    • Go through EVERY item in that checklist and apply it (e.g. run commands, which files to bump versions in, etc)
    • Run the /enhance command on new or modified commands, agents, skills, hooks or prompts
    • Verify cross-platform compatibility (OpenCode + Codex)
    • Update bin/cli.js mappings if new command/agent added
    • Only mark complete after ALL checklist items are done WHY: Checklists exist because we kept missing things. They are the definition of "done".

Read the full file on GitHub · 278 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 278 lines · 3,115 tokens per session scan A 24a2c0b740bd

Subscribe to this mod's changes

agentsys AGENTS.md is an instructions file published in the GitHub repository agent-sh/agentsys (980 stars, last pushed 5d ago), licensed MIT. It adds 3,115 tokens to every session, about $0.0156 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.