Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/botiverse/hands/agents-mdgit clone --depth 1 https://github.com/botiverse/handsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.02047 | $0.02047 |
| Opus 5 | $0.01024 | $0.01024 |
| Sonnet 5 | $0.00409 | $0.00409 |
| Haiku 4.5 | $0.00205 | $0.00205 |
Grade C, and why
hands AGENTS.md scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
ssh-add ~/.ssh/id_ed25519 Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
--service quiver` → `curl` the printed one-time callback URL → export the How it starts
The opening of the file, as written. The whole thing — 218 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Hands Agent Guide
This is the first-page guide for agents working in the Hands repository. Hands manages APK uploads, release channels, public update checks, share pages, and Raft-based access control on Cloudflare Workers, Containers, D1, and R2.
Start Here
- Read this file and
CONTRIBUTING.md. - On a new machine, verify GitHub CLI and git SSH access before cloning, creating worktrees, or pushing branches.
- Check the task thread that brought you here, then claim the task before doing any work.
- Create or reuse an isolated worktree for code changes.
- Report progress in the task thread, not as a new root message.
New Machine GitHub Setup
Check GitHub CLI:
gh auth status
If it is not logged in, use the normal GitHub CLI flow:
gh auth login
Prefer SSH for git operations. Confirm SSH access:
ssh -T [email protected]
Expected result is GitHub accepting the key and saying shell access is not provided. If SSH fails, create or register a key before cloning/pushing:
ssh-keygen -t ed25519 -C "<your-email-or-agent>@mail.build"
eval "$(ssh-agent -s)"
ssh-add ~/.ssh/id_ed25519
gh ssh-key add ~/.ssh/id_ed25519.pub --title "$(hostname)-quiver"
ssh -T [email protected]
Do not paste SSH private keys, GitHub tokens, NPM_TOKEN,
CLOUDFLARE_API_TOKEN, Hands deploy tokens, Raft client secrets, session
cookies, or other credentials into public Raft channels.
Repository Map
| Purpose | Local path / package | Notes |
|---|---|---|
| Hands canonical checkout | /Users/artin/0Workspace/github.com/oranix-io/quiver |
github.com/oranix-io/quiver |
| Worker | worker/ |
Hono Worker, API routes, Login with Raft, D1/R2 access |
| Admin UI | admin/ |
React + Vite + Tailwind admin SPA and docs shell |
| APK parser container | container/ |
Cloudflare Container using aapt / apksigner |
| CLI package | packages/cli/ |
@botiverse/hands-cli |
| Android updater SDK | clients/android/ |
Update checks and APK installation |
| Docs | docs/ |
Admin guide, CLI reference, API reference, architecture notes |
| Migrations | migrations/ |
D1 SQL schema migrations |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 218 lines · 2,047 tokens per session scan C a108fe4f73ec
hands AGENTS.md is an instructions file published in the GitHub repository botiverse/hands (47 stars, last pushed yesterday), licensed MIT. It adds 2,047 tokens to every session, about $0.0102 per session on Opus 5. A static security scan graded it C with 2 findings (reaches for credential files, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.
Other instructions, from other repositories
minshop AGENTS.md
Instructions for ddyy/minshop, covering agents.md — working on minshop, the loop (run this constantly), inspecting local data: use local explorer, not the cli, customizing a cloned shop and architecture in one screen.
flarestarter AGENTS.md
Instructions for FlareStarter/flarestarter, covering agents.md, what this is, structure, conventions and commands.
hermes-mobile AGENTS.md
Instructions for Hy4ri/hermes-mobile, covering agents.md, project overview, build & test commands, ✅ local android sdk — if available and download the matching binary.
microfeed AGENTS.md
AGENTS.md instructions for microfeed/microfeed, covering repository guidance, development workflow, instance management and cloudflare deployment, source architecture and theme repositories.
microfeed CLAUDE.md
Claude Code instructions for microfeed/microfeed, a project described as: an agentic cms self-hosted on cloudflare, for podcasts, blogs, photos, videos, documents, and curated urls.
flarestarter CLAUDE.md
Instructions for FlareStarter/flarestarter: This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.