Borrowing it
Nothing to install: this file belongs to avifenesh/tools. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/avifenesh/tools/main/AGENTS.mdgit clone --depth 1 https://github.com/avifenesh/toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/avifenesh/tools/agents-md)<a href="https://agentmods.dev/instructions/avifenesh/tools/agents-md"><img src="https://agentmods.dev/badge/instructions/avifenesh/tools/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/avifenesh/tools/agents-md"><img src="https://agentmods.dev/badge/instructions/avifenesh/tools/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.02011 | $0.02011 |
| Opus 5.5 | $0.00804 | $0.00804 |
| Sonnet 5.5 | $0.00402 | $0.00402 |
| Haiku 4.5 | $0.00201 | $0.00201 |
Grade A, and why
tools AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 133 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md: @agent-sh/harness-* monorepo
Guidance for AI agents working on this repo. The repo builds LLM-facing agent tools (Read, Write, Grep, Glob, ...) as a TypeScript-first npm library, with Rust ports coming later. The tools are consumed by real language models inside agent harnesses, not by deterministic callers.
The prime directive: treat LLM tools as a chaotic distributed system, not as kernel code
The user is a systems software engineer (Valkey, CRIU, ElastiCache). These tools look like regular functions (typed inputs, typed outputs, clean error enums), but that framing is a trap. The consumer is a probabilistic model, so the contract is not "given these args, produce this output." The contract is:
Given only the tool's textual surface (name, description, schema field names, error messages, output shape, pagination hints), does a real model, across many families (Qwen, Llama, GPT, Claude, Codex, DeepSeek), pick this tool, call it correctly, interpret the result, and make good next moves without giving up and falling back to Bash?
That is the spec. Everything else is implementation detail.
Why this matters: the failure modes that unit tests never catch
- Description-driven misuse. An ambiguous parameter name (
pathvsfile_path,limitvsmax_lines) causes the model to pass the wrong thing. The code is fine. The tool is broken. - Unrecoverable errors.
ENOENTwith no context leaves the model stuck. A NOT_FOUND that lists sibling candidates lets it self-correct. - Ignored hints. The output says
next_offset: 2000but the model re-reads from 0 and loops. The pagination design is the failure. - Silent non-invocation. The model reads the description, decides the
tool doesn't fit, and shells out to
cat/grep/lsvia Bash instead. You will not see this in any unit test. You will only see it when you log real sessions and notice your tool is never called. - Hallucinated output. The tool returns JSON the model misparses, so the model confidently reports content that was never in the file.
- Tool-as-friction. A well-intentioned safety rail (sensitive-path deny, forced pagination, mandatory ledger confirmation) makes the tool annoying enough that the model routes around it. The user has shipped many tools and watched exactly this happen: "too many to count."
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +2 lines · +160 tokens per session b54efb537d38
- 1mo ago Changed · +11 lines · +190 tokens per session 8ea28ade3581
- 2mo ago First seen · 120 lines · 1,661 tokens per session scan A 63c9c8ab2e52
tools AGENTS.md is an instructions file published in the GitHub repository avifenesh/tools (7 stars, last pushed 26d ago), licensed MIT. It adds 2,011 tokens to every session, about $0.0080 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
tools AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| tools AGENTS.mdavifenesh/tools | Instructions file | 7 | 26d ago | MIT | A | 2,011 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | yesterday | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |