Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/coding-dev-tools/envault/agents-mdgit clone --depth 1 https://github.com/Coding-Dev-Tools/envaultWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00584 | $0.00584 |
| Opus 5 | $0.00292 | $0.00292 |
| Sonnet 5 | $0.00117 | $0.00117 |
| Haiku 4.5 | $0.00058 | $0.00058 |
Grade A, and why
envault AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
envault — AGENTS.md
Overview
CLI for environment variable syncing, diffing, and secret rotation with integrations for HashiCorp Vault, AWS SSM, Doppler, and 1Password.
Quick Start
pip install -e ".[dev]"
rh-envault --help
Commands
| Command | Description |
|---|---|
rh-envault sync |
Sync env vars between local .env and remote stores |
rh-envault diff |
Diff two env sources |
rh-envault rotate |
Rotate secrets in configured stores |
rh-envault audit |
Audit local env files for secrets |
rh-envault serve |
Run local HTTP server for env access |
rh-envault encrypt |
Encrypt/decrypt values |
Development
# Install dev deps
pip install -e ".[dev]"
# Run tests
python -m pytest tests/ -v --tb=short
# Lint
ruff check src/ --target-version py310
# Type check (if mypy configured)
mypy src/
CI/CD
- GitHub Actions:
.github/workflows/ci.yml(test matrix: 3.11, 3.12, 3.13) - Publish:
.github/workflows/publish.yml(PyPI on tag) - Pages:
.github/workflows/pages.yml(docs deploy)
Structure
src/envault/
├── cli.py # Typer CLI entry point
├── config.py # Configuration loading
├── sync.py # Sync logic
├── diff.py # Diff logic
├── rotate.py # Rotation logic
├── audit.py # Secret scanning
├── encrypt.py # Encryption utilities
├── serve.py # HTTP server
└── stores/ # Backend integrations
├── __init__.py
├── vault.py
├── awsssm.py
├── doppler.py
└── onepassword.py
Dependencies
- Core: typer, rich, python-dotenv, pyyaml, cryptography, pydantic
- Optional: hvac (Vault), boto3 (AWS SSM), requests (Doppler), onepasswordconnectsdk (1Password)
- Dev: pytest, pytest-cov, responses, ruff
Testing
pytest tests/ -v --tb=short
pytest tests/test_cli.py -v
pytest tests/test_encrypt_secret_formats.py -v
Security
- Never commit
.env.*files (gitignored) - Audit log at
.envault-audit.log(gitignored) - Rotate secrets via
rh-envault rotatecommand
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 76 lines · 584 tokens per session scan A 20434f93c320
envault AGENTS.md is an instructions file published in the GitHub repository Coding-Dev-Tools/envault (2 stars, last pushed 8d ago), licensed MIT. It adds 584 tokens to every session, about $0.0029 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
deepagents AGENTS.md
Instructions for langchain-ai/deepagents, covering global development guidelines for the deep agents monorepo, corridor security analysis, development workflow, suppressing ruff rules and pr conventions.
autoharness AGENTS.md
Instructions for tigerless-labs/autoharness: This repo uses Open Knowledge — collaborative markdown via MCP. .open-knowledge/config.yml (with optional /.open-knowledge/config.yml; CLI/env may override) is the path contract: content.dir is the root for relative paths; content.include lists globs that add markdown…
cookiecutter-mlops-package AGENTS.md
Instructions for fmind/cookiecutter-mlops-package, covering agents.md, project overview, setup & core commands, definition of done and conventions & idioms.
intervals-icu-mcp CLAUDE.md
Instructions for hhopke/intervals-icu-mcp, covering claude.md, project overview, development commands, architecture (quick reference) and tool categories.
python-cheatsheet copilot-instructions.md
Copilot instructions for labex-labs/python-cheatsheet, covering python cheatsheet - ai coding assistant instructions, project overview, architecture & key patterns, content structure and routing & layout system.
martex-quant CLAUDE.md
Instructions for martex-dev/martex-quant, covering session start — read these first, project instructions, ai trading bot project - master instructions, role and project objective.