Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/azrtydxb/procoder/docsgit clone --depth 1 https://github.com/azrtydxb/procoderWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00601 | $0.00601 |
| Opus 5 | $0.00300 | $0.00300 |
| Sonnet 5 | $0.00120 | $0.00120 |
| Haiku 4.5 | $0.00060 | $0.00060 |
Grade C, and why
procoder docs.instructions.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
<!-- Scoped to the prose a person writes: the root documents, the docs site, and the specs. Deliberately NOT every markdown file — most of this repository's .md files are generated agent rule files or .procoder/ backlog How it starts
The opening of the file, as written. The whole thing — 58 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Prose in procoder
Documentation is checked, not merely written. procoder docs blocks on
broken relative references and non-compiling Mermaid; procoder docs --external adds link checking and Pages health in CI.
What the docs must keep in step with
- Every command in the dispatch appears in
procoder helpAND indocs/commands.md. Three shipped absent from both —config,reviewandanalyze— because the test that existed pinned the usage text against a canonical list, and a command absent from both agrees with itself.TestEveryShippedCommandIsDiscoverablereads the dispatch now. - Every flag the binary implements is documented, and every documented
flag is accepted.
docs --ack— the command the gate's own blocking message tells an agent to run — was documented nowhere. - A command's entry describes what its flags do, not just that they exist, and says what it exits when that is surprising.
The changelog
CHANGELOG.md carries its rules at the top and the suite enforces them on
the newest entry, because the release job publishes that entry verbatim.
In short: an italic one-sentence summary; every headline opens with Added,
Fixed, Changed, Removed or Security; every entry links the PR that shipped
it; every outside contributor is named AND linked, including somebody who
only filed the issue. Verify a handle with gh issue view before writing
it — a misattributed credit is worse than none, and procoder release
checks each one against GitHub.
Specs
Every bullet under ## In scope carries an [S-n] id, and every
acceptance criterion cites the id it covers. spec check refuses
otherwise, and backlog seed refuses an incomplete spec. This exists
because a spec once closed at fourteen of fourteen with two features never
built.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 58 lines · 601 tokens per session scan C e9ea3175bd07
procoder docs.instructions.md is an instructions file published in the GitHub repository azrtydxb/procoder (196 stars, last pushed 2d ago), licensed Apache-2.0. It adds 601 tokens to every session, about $0.0030 per session on Opus 5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
sdlc-quality AGENTS.md
Instructions for zircote-plugins/sdlc-quality, covering agents.md - openai codex guidelines, project identity, quick context, agent guidelines and 1. understand the domain model.
sdlc-quality copilot-instructions.md
Instructions for zircote-plugins/sdlc-quality, covering copilot instructions for sdlc plugin, project overview, repository structure, key conventions and rfc 2119 terminology.
high-quality-projects-skill AGENTS.md
AGENTS.md instructions for RandyNorthrup/high-quality-projects-skill, covering agents.md, the two workflows, resolving paths, what is in here and non-negotiables when using this package.
code-discipline-skills AGENTS.md
Instructions for eliranpv11/code-discipline-skills, covering code discipline, priority order, 1. think before coding, 2. verify reality before acting and 3. simplicity first.
high-quality-projects-skill copilot-instructions.md
Copilot instructions for RandyNorthrup/high-quality-projects-skill: This repository provides two vendor-neutral workflows for holding a codebase to production standards.
arbiterx CLAUDE.md
Instructions for NeelPrime/arbiterx, covering arbiterx engineering rules, setup, rules (always enforced), never generate and quality gate.