Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/agno-agi/scout/agents-mdgit clone --depth 1 https://github.com/agno-agi/scoutWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.03932 | $0.03932 |
| Opus 5 | $0.01966 | $0.01966 |
| Sonnet 5 | $0.00786 | $0.00786 |
| Haiku 4.5 | $0.00393 | $0.00393 |
Grade A, and why
scout AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 249 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Project Overview
Scout is an enterprise context agent — a single agno.Agent with N ContextProviders. Ships with WebContextProvider, WorkspaceContextProvider (local files via agno.tools.Workspace), DatabaseContextProvider (the CRM — user's contacts/projects/notes/follow-ups), two WikiContextProviders (a writable knowledge wiki and a read-only voice wiki), SlackContextProvider, GDriveContextProvider, and MCPContextProvider (any MCP server → one query_mcp_<slug> tool on Scout). GitHub, Gmail, and Calendar land in the next release (were built and verified on the feat/slack-interface branch; dropped from the ship slice until we can test end-to-end with real tokens).
Architecture
Scout (single Agent — one LLM hop per turn)
tools = <query_|update_ tools from every registered ContextProvider> + list_contexts
Every source is a ContextProvider. The database is a provider too: DatabaseContextProvider exposes query_crm (reads) + update_crm (writes), each backed by a dedicated sub-agent so the read path never sees the write engine.
ContextProvider
agno.context.provider defines the base. Every external source subclasses ContextProvider and implements:
query(question) -> Answer/aquery(question) -> Answer— natural-language readstatus() -> Status/astatus() -> Status— is the source reachable?
Providers that support writes override aupdate(instruction) -> Answer (and optionally update). The base raises NotImplementedError; _update_tool() translates that into a readable " is read-only" error so calling agents see a clean failure. Today only DatabaseContextProvider overrides it.
mode controls how the provider surfaces itself to the calling agent:
| Mode | Exposure |
|---|---|
default |
The provider's recommended exposure. Each subclass decides. |
agent |
One query_<id> tool wrapping a sub-agent. |
tools |
The underlying tools directly. |
model swaps the model used by the internal sub-agent (when one is built). instructions() returns mode-aware usage guidance for the calling agent.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 249 lines · 3,932 tokens per session scan A be13eb8b51bc
scout AGENTS.md is an instructions file published in the GitHub repository agno-agi/scout (719 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 3,932 tokens to every session, about $0.0197 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
context AGENTS.md
Instructions for agno-agi/context, covering @context, what this is, architecture, key files and the owner/guest security model.
context CLAUDE.md
Instructions for agno-agi/context, a project described as: A self-hosted context manager. @context organizes your work into a private CRM and knowledge base and helps you stay on top of things.
quant-mind AGENTS.md
Instructions for LLMQuant/quant-mind, covering quantmind — agent instructions, progressive context loading, what this is, positioning and module map.
nextcrm-app AGENTS.md
Instructions for pdovhomilja/nextcrm-app, covering agents.md, 1. context-mode, tool hierarchy, forbidden actions and trigger commands.
relaticle CLAUDE.md
Claude Code instructions for relaticle/relaticle, covering architecture, module boundaries (enforced by tests/arch/archtest.php), actions (the write path), i18n enforcement and chat.
agentscope-runtime copilot-instructions.md
Instructions for agentscope-ai/agentscope-runtime, covering agentscope runtime code review guide, 1. code quality, 2. [must] code security, 3. [must] testing & dependencies and 4. code standards.