codexicon: Instructions file for Codex

AGENTS.md

codexicon AGENTS.md is an instructions file for Codex, OpenCode from bnet47/codexicon. It costs 1,527 tokens per session, scanned C, original, MIT.

Repository instructions that describe a project's purpose, technology choices, commands, working agreements, and development workflow.

In plain words
What is it for?
Use them to identify the project's setup, development, linting, testing, security checks, and required discovery or initialization steps.
Why use it?
They give a coding agent the project context it needs before making decisions or changing files.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions subagents; reads ~/.codex paths; mentions AGENTS.md.

This is bnet47/codexicon's own configuration. It tells Codex and OpenCode how to work on codexicon itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything codexicon configures →

Reuse

Borrowing it

Nothing to install: this file belongs to bnet47/codexicon. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/bnet47/codexicon/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/bnet47/codexicon

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for codexicon AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/bnet47/codexicon/agents-md/github.svg)](https://agentmods.dev/instructions/bnet47/codexicon/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/bnet47/codexicon/agents-md"><img src="https://agentmods.dev/badge/instructions/bnet47/codexicon/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for codexicon AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/bnet47/codexicon/agents-md"><img src="https://agentmods.dev/badge/instructions/bnet47/codexicon/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,527 This file is loaded in full into every session.
When invoked 1,527 The same file — it is already loaded in full.
Security scan C 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01527 $0.01527
Opus 5.5 $0.00611 $0.00611
Sonnet 5.5 $0.00305 $0.00305
Haiku 4.5 $0.00153 $0.00153

Measured 1mo ago against content hash 09b0115fa696, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade C, and why

codexicon AGENTS.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reaches for credential fileshighPrivilege escalation

SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.

- Never read or write credential-bearing `.env` / `.env.*` files (except `.env.example`), `secrets/**`, private-key files, credential JSON, or user credential stores such as `.npmrc`, `.netrc`, `.aws/credentials`, `.ssh/
AGENTS.md · 97 lines

How it starts

The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — Codexicon

Durable repository guidance for Codex. Keep this file short; detailed workflows belong in skills and project facts belong in agent_docs/.

Project

  • Name: Codexicon
  • Purpose: Portable local-first template and manager for inspectable, verified agent-driven development.
  • Stack: Python 3.10+ · Markdown/TOML/JSON · filesystem state · local checkout and GitHub Actions
  • Phase: production
  • Owner: bnet47

Use $discover to create or amend the root SPEC.md before making product or stack decisions. Only consequential unresolved decisions may pause the work.

Commands

Run commands from the repository root.

./scripts/setup.sh              # install dependencies and prepare local config
./scripts/dev.sh                # start the local development environment
./scripts/lint.sh               # lint, format-check, and type-check
./scripts/lint.sh --fix         # apply safe lint/format fixes
./scripts/test.sh               # run the full test suite
./scripts/security.sh           # scan tracked/non-ignored safe files for credentials
python scripts/codexicon.py doctor  # diagnose harness/configuration drift
python scripts/codexicon.py verify  # run lint, tests, and security in canonical order
./scripts/deploy.sh staging     # deploy to staging
./scripts/deploy.sh prod        # production; requires DEPLOY_APPROVED=true

Before initialization, native Windows can run ./scripts/lint.ps1 and ./scripts/test.ps1. $init must create equivalent native wrappers or platform-neutral commands for every command the configured project supports; do not silently substitute weaker verification.

Working agreements

  • Start from the requested outcome and done conditions. Inspect first; preserve unrelated changes.
  • Build is autonomous by default: inspect, plan, implement, verify, critique, refine, and continue through the root TASKS.md without routine approval prompts or suggested-next-prompt stops while work is runnable. Make reversible assumptions and record consequential ones; batch genuinely blocking questions.
  • Use $autonomous-build for multi-task work. Use $engineering-loop only for independent read-only research or review. Keep small clear changes direct.
  • Use $find-skills only for an explicit capability search. External skill discovery is read-only until the user approves a reviewed, pinned, project-local installation.
  • Prefer the smallest complete solution. Use rg for search and apply_patch for manual edits.
  • Load only relevant context. Use targeted commands and bounded output; do not dump whole logs, generated files, or minified content when an excerpt proves the point.
  • Communicate densely: no request restatement, filler, or repeated summary. Preserve exact code, commands, paths, identifiers, and errors. Clarity wins for risk or ambiguity.
  • Verify proportionally: full lint/tests for code, config, generated artifacts, and shipping; security before Git publication; applicable structural checks for documentation-only work.
  • Report commands, results, and anything not verified.
  • Record consequential assumptions and decisions as new append-only records in agent_docs/decisions/, including rationale, alternatives, impact, owner, date, status, and evidence.
  • Related scope may expand only for a small, reversible, directly related change within the declared system boundary; explicitly escalate authority, product behavior, schema/data shape, security posture, irreversible or destructive outcomes, credentials, production actions, migrations, external writes, publication, deployment, legal/compliance commitments, or material architecture changes.

Read the full file on GitHub · 97 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +2 lines · +144 tokens per session 09b0115fa696
  2. 1mo ago Changed · +43 tokens per session ec0306b49ba7
  3. 1mo ago Changed · +1 lines · +11 tokens per session f2c107bcd072
  4. 1mo ago First seen · 94 lines · 1,329 tokens per session scan C c9cb06b04076

Subscribe to this mod's changes

codexicon AGENTS.md is an instructions file published in the GitHub repository bnet47/codexicon (5 stars, last pushed 3d ago), licensed MIT. It adds 1,527 tokens to every session, about $0.0061 per session on Opus 5.5. A static security scan graded it C with 1 finding (reaches for credential files). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories