Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/ariaxhan/agentmailkit/agents-mdgit clone --depth 1 https://github.com/ariaxhan/agentmailkitWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.02584 | $0.02584 |
| Opus 5 | $0.01292 | $0.01292 |
| Sonnet 5 | $0.00517 | $0.00517 |
| Haiku 4.5 | $0.00258 | $0.00258 |
Grade A, and why
agentmailkit AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- agentmailkit CLAUDE.md — 97% identical, 6 lines differ
How it starts
The opening of the file, as written. The whole thing — 270 lines — stays where its author put it; the contents beside it link to each section on GitHub.
agentmailkit: setup guide for coding agents
type: note status: active created: 2026-08-27
compression — mandatory
minimum text. zero meaningful loss.
- default: bullets + fragments.
- prose only when structure would lose meaning.
- delete anything removable.
- merge anything redundant.
- shorten anything compressible.
- never narrate work; report results, evidence, blockers, decisions.
- preserve correctness, clarity, decisions, evidence, uncertainty, action.
- length follows information. never pad; never omit.
- between tool calls: silence by default. no preamble, no plan, no progress report.
- one line only if it states a finding that changes what happens next. never intent.
before emitting:
- convert prose → bullets/fragments wherever lossless.
- delete every removable word, sentence, bullet, section, preamble, recap, transition, or explanation.
- repeat until further compression would lose meaning.
do not emit while removable text remains.
verbosity is a defect. omission is also a defect.
You are setting up agentmailkit for the person you are working with. It sends scheduled, LLM-written email digests that run on their machine, read their own files, and send from their own inbox.
Work through this top to bottom. It should take a few minutes and end with a real email in their inbox.
0. What this tool is, so you explain it correctly
A fixed pipeline, not an autonomous agent:
gather sources -> render prompt -> generate -> gate -> render theme -> deliver -> post
One JSON job spec plus one markdown prompt equals one email. The model writes only the words; the engine controls everything else, so the same job produces the same shaped email every run.
Do not describe it as an AI agent that manages their inbox. It does not read incoming mail, decide things, or take actions.
1. Ask these questions first
Do not skip this. Defaults produce a generic email nobody opens. Ask, then build to the answers. Ask them together, in one message, and keep it short.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 270 lines · 2,584 tokens per session scan A 420bda256ef9
agentmailkit AGENTS.md is an instructions file published in the GitHub repository ariaxhan/agentmailkit (1 stars, last pushed 4d ago), licensed MIT. It adds 2,584 tokens to every session, about $0.0129 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
dograh AGENTS.md
AGENTS.md instructions for dograh-hq/dograh, covering dograh - project overview, project structure, tech stack, local development and environment configuration.
lobster0 AGENTS.md
Instructions for NEDONION/lobster0, covering lobster0 agent 工程规范, 适用范围与优先级, 项目事实, 常用命令 and 首次安装或依赖变化后.
PBP CLAUDE.md
Instructions for MadGapun/PBP, covering pbp — claude-code-memory, stand 2026-08-25 (v1.7.23 stable) — ehrliche zahlen, stand 2026-07-16 (v1.8.0-beta.6, prerelease) — hotfix #760, stand 2026-07-14 (v1.7.7) — scoring-fairness & praxis-funde and stand 2026-07-03 (v1.7.6) — alltags-fuehrung.
artel CLAUDE.md
Instructions for NicolasPrimeau/artel, covering artel, what it is, stack, layout and core primitives.
PBP AGENTS.md
Instructions for MadGapun/PBP, covering agents.md — pbp (persönliches bewerbungs-portal), projektübersicht, architektur, setup & tests and windows: doppelklick.
freelingo AGENTS.md
AGENTS.md instructions for artcc/freelingo, covering agents.md — freelingo, project state, architecture at a glance, key constraints and documentation maintenance (mandatory).