codexicon AGENTS.md

Repository instructions that describe a project's purpose, technology choices, commands, working agreements, and development workflow.

In plain words
What is it for?
Use them to identify the project's setup, development, linting, testing, security checks, and required discovery or initialization steps.
Why use it?
They give a coding agent the project context it needs before making decisions or changing files.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/bnet47/codexicon/agents-md
Clone the repo
git clone --depth 1 https://github.com/bnet47/codexicon

Made for: Codex, OpenCode.

Per session 1,329 This file is loaded in full into every session.
When invoked 1,329 The same file — it is already loaded in full.
Security scan C 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01329 $0.01329
Opus 5 $0.00665 $0.00665
Sonnet 5 $0.00266 $0.00266
Haiku 4.5 $0.00133 $0.00133

Measured 2d ago against content hash c9cb06b04076, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

codexicon AGENTS.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reaches for credential fileshighPrivilege escalation

SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.

- Never read or write credential-bearing `.env` / `.env.*` files (except `.env.example`), `secrets/**`, private-key files, credential JSON, or user credential stores such as `.npmrc`, `.netrc`, `.aws/credentials`, `.ssh/
AGENTS.md · 94 lines

How it starts

The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — [PROJECT_NAME]

Durable repository guidance for Codex. Keep this file short; detailed workflows belong in skills and project facts belong in agent_docs/.

Project

  • Name: [PROJECT_NAME]
  • Purpose: [one sentence describing the problem and intended outcome]
  • Stack: [language · framework · data store · deploy target]
  • Phase: [idea | prototype | alpha | production]
  • Owner: [name or GitHub handle]

If these fields are still placeholders, treat the repository as an unconfigured template. Use $discover before making product or stack decisions, then $init to configure the repository.

Commands

Run commands from the repository root.

./scripts/setup.sh              # install dependencies and prepare local config
./scripts/dev.sh                # start the local development environment
./scripts/lint.sh               # lint, format-check, and type-check
./scripts/lint.sh --fix         # apply safe lint/format fixes
./scripts/test.sh               # run the full test suite
./scripts/security.sh           # scan tracked/non-ignored safe files for credentials
python scripts/codexicon.py doctor  # diagnose harness/configuration drift
python scripts/codexicon.py verify  # run lint, tests, and security in canonical order
./scripts/deploy.sh staging     # deploy to staging
./scripts/deploy.sh prod        # production; requires DEPLOY_APPROVED=true

Before initialization, native Windows can run ./scripts/lint.ps1 and ./scripts/test.ps1. $init must create equivalent native wrappers or platform-neutral commands for every command the configured project supports; do not silently substitute weaker verification.

Working agreements

  • Start from the requested outcome and done conditions. Inspect first; preserve unrelated changes.
  • For clear requests, own the internal build/review loop and do not turn skills into approval gates. Make reversible assumptions; record consequential ones; batch blocking questions; escalate only for material product, irreversible, destructive, external, production, credential, legal, regulatory, security, or financial risk.
  • For medium or high-complexity work, use $engineering-loop when independent exploration, implementation, testing, or review lanes materially improve the result. Keep small clear changes direct.
  • Use $find-skills only for an explicit capability search. External skill discovery is read-only until the user approves a reviewed, pinned, project-local installation.
  • Prefer the smallest complete solution. Use rg for search and apply_patch for manual edits.
  • Load only relevant context. Use targeted commands and bounded output; do not dump whole logs, generated files, or minified content when an excerpt proves the point.
  • Communicate densely: no request restatement, filler, or repeated summary. Preserve exact code, commands, paths, identifiers, and errors. Clarity wins for risk or ambiguity.
  • Verify proportionally: full lint/tests for code, config, generated artifacts, and shipping; security before Git publication; applicable structural checks for documentation-only work.
  • Report commands, results, and anything not verified.

Read the full file on GitHub · 94 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 94 lines · 1,329 tokens per session scan C c9cb06b04076

Subscribe to this mod's changes

codexicon AGENTS.md is an instructions file published in the GitHub repository bnet47/codexicon (5 stars, last pushed 3d ago), licensed MIT. It adds 1,329 tokens to every session, about $0.0066 per session on Opus 5. A static security scan graded it C with 1 finding (reaches for credential files). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

genomi AGENTS.md

Instructions for exon-research/genomi, covering genomi development agent instructions, genomi design principles, connect, operating rule and fresh task flow.

exon-research/genomi · 5,815 tokens

Sponsio CLAUDE.md

Instructions for SponsioLabs/Sponsio, covering agent guide for sponsio, what sponsio is, positioning, what to read first and repository map.

SponsioLabs/Sponsio · 1,937 tokens

holaOS CLAUDE.md

Claude Code instructions for holaboss-ai/holaOS, covering holaos — repo guide and hola — debug the hola (pi) brain from the cli.

holaboss-ai/holaOS · 859 tokens

nulnul-harness AGENTS.md

Instructions for SeoNaRu/nulnul-harness: This repository builds plugins/nulnul-harness/, a Codex plugin that finds proven capabilities, assembles the smallest useful project-local agent system, completes the user's work, and evolves it from measured outcomes without requiring users to operate a harness.

SeoNaRu/nulnul-harness · 1,555 tokens

pixir AGENTS.md

Instructions for Ranvier-Technologies/pixir, covering agents.md - pixir harness, progressive discovery, screaming architecture, beta stance and commands.

Ranvier-Technologies/pixir · 2,790 tokens

spec-driven-development-template AGENTS.md

Instructions for juanklagos/spec-driven-development-template, covering mandatory reading order / orden obligatorio de lectura, mandatory workflow / flujo obligatorio, required reference / referencia obligatoria, final requirement / requisito final and uso explícito del repositorio base.

juanklagos/spec-driven-development-template · 2,681 tokens