composio AGENTS.md

Repository-wide instructions for AI coding agents working in Composio's monorepo, a single repository containing multiple related SDKs and documentation.

In plain words
What is it for?
Use it before making changes in the repository, especially when deciding where code belongs or which local skill to follow.
Why use it?
It explains the repository layout, safe editing rules, branch expectations, generated files, and how to choose other instructions for a task.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/composiohq/composio/agents-md
Clone the repo
git clone --depth 1 https://github.com/ComposioHQ/composio

Made for: Codex, OpenCode.

Per session 1,143 This file is loaded in full into every session.
When invoked 1,143 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01143 $0.01143
Opus 5 $0.00571 $0.00571
Sonnet 5 $0.00229 $0.00229
Haiku 4.5 $0.00114 $0.00114

Measured 3d ago against content hash ed82ccaff5a3, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

composio AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 106 lines

How it starts

The opening of the file, as written. The whole thing — 106 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Repository guidance for Codex, Claude Code, Cursor, pi.dev, and other AI coding agents.

Scope

This is the Composio SDK v3 monorepo. Most product code lives in ts/ and python/; docs live in docs/. Branch new work from next and target PRs at next unless the user says otherwise.

First Steps

  1. Read the nearest nested AGENTS.md before editing a subtree.
  2. Preserve unrelated dirty work. Do not revert, delete, or reformat files outside the requested scope.
  3. Treat .agents/skills as the canonical local skill tree. .claude/skills is a compatibility symlink and must not be edited as a separate copy.
  4. Do not edit generated SDK surfaces or vendor trees — see Generated And Vendored Paths.
  5. Verify every command you write against the current package.json, Makefile, noxfile.py, or workflow file.

Skill Routing

Use the smallest relevant skill:

  • repo-guidance: repo layout, branch/PR workflow, changesets, generated files, or cross-repo maintenance.
  • skill-maintenance: adding or changing local skills, skill references, compatibility mirrors, or validation.
  • bug-fixing: fixing a defect and choosing regression tests.
  • cross-sdk-parity: aligning TypeScript and Python behavior, generated client bumps, or API contract drift.
  • docs-decisions: docs site work, changelogs, docs decisions, or docs automation.
  • good-docs-writing: drafting or revising docs prose in the house writing voice.
  • good-docs-audit: reviewing existing docs or prose against that voice and reporting violations.
  • eve: durable backend AI agents built with the eve framework.
  • typescript-sdk, typescript-testing, typescript-providers: TypeScript SDK/core/provider work.
  • cli-command, cli-e2e: CLI design/implementation or CLI end-to-end tests.
  • cli-release: first-party CLI beta builds, stable promotion, release verification, or recovery.
  • python-sdk, python-testing, python-providers, python-release: Python SDK/provider/testing/release work.

Read the full file on GitHub · 106 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 106 lines · 1,143 tokens per session scan A ed82ccaff5a3

Subscribe to this mod's changes

composio AGENTS.md is an instructions file published in the GitHub repository ComposioHQ/composio (30,003 stars, last pushed yesterday), licensed MIT. It adds 1,143 tokens to every session, about $0.0057 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.