Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/conversun/cliproxy-plugin-opencode-cloak/agents-mdgit clone --depth 1 https://github.com/conversun/cliproxy-plugin-opencode-cloakWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01748 | $0.01748 |
| Opus 5 | $0.00874 | $0.00874 |
| Sonnet 5 | $0.00350 | $0.00350 |
| Haiku 4.5 | $0.00175 | $0.00175 |
Grade A, and why
cliproxy-plugin-opencode-cloak AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 108 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
What this repo is
A C-ABI shared library, not a program. Single flat Go package main at the repo root, built with
-buildmode=c-shared and loaded via dlopen by a CLIProxyAPI host. func main() {} is intentionally
empty — never "fix" it. Read README.md for the product-level contract (activation gates, config
fields, division of labor with the host).
Commands
make build # go build -buildmode=c-shared -o bin/opencode-cloak.$EXT . (EXT auto: dylib/so/dll)
make test # go test ./... -count=1
make vet # go vet ./...
make fmt # gofmt -w .
CI (.github/workflows/ci.yml) runs, in order: gofmt check → go vet → go test → c-shared build,
on ubuntu-latest + macos-latest. The gofmt gate is test -z "$(gofmt -l .)" — any unformatted file
fails the build, so run make fmt before finishing.
Single test: go test -run TestName -v. There is no lint tool beyond gofmt + go vet.
Build constraints
- CGO is mandatory (
CGO_ENABLED=1);make buildrelies on the default being on. - Cross-compilation does not work.
GOOS=linux go buildon macOS fails inruntime/cgo. Release artifacts come from a 5-runner matrix in.github/workflows/release.yml(linux/darwin × amd64/arm64 plus windows/amd64), triggered by av*tag. Never try to produce another platform's library locally. bin/is gitignored;bin/opencode-cloak.his cgo-generated output, not source. The release build likewiserms the generated.hbefore packaging — the store installer rejects an archive that carries anything but the single dynamic library.
File map
| File | Role |
|---|---|
main.go |
C ABI boundary (cgo preamble, exported symbols), handleMethod dispatch, YAML config parsing, plugin.register metadata |
transform.go |
Activation gates + system[] rewrite; holds currentConfig (atomic pointer) |
cloaking.go |
Paragraph-level sanitizer for opencode system text |
cch.go |
Billing-header construction: cch hash + version suffix |
useragent.go |
Canonical Claude Code User-Agent detection (gate only) |
.github/scripts/package-release.go |
//go:build ignore CI packager: wraps the built library in the plugin-store zip layout (<id>_<ver>_<goos>_<goarch>.zip, lib at zip root) and emits its sha256sum line |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 108 lines · 1,748 tokens per session scan A 95e44095dfa3
cliproxy-plugin-opencode-cloak AGENTS.md is an instructions file published in the GitHub repository conversun/cliproxy-plugin-opencode-cloak (8 stars, last pushed 20d ago), licensed MIT. It adds 1,748 tokens to every session, about $0.0087 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
no-mistakes AGENTS.md
AGENTS.md instructions for kunchenguid/no-mistakes, covering agents.md and maintaining this file.
trpc-agent-go AGENTS.md
AGENTS.md instructions for trpc-group/trpc-agent-go, covering agents.md, project overview, engineering principles, go design conventions and implementation workflow.
azure-sdk-for-go go-code.instructions.md
Instructions for Azure/azure-sdk-for-go: All code should follow the guidelines from the Azure Go SDK Guidelines. This document is a summary of the most important guidelines to follow when contributing to the Azure Go SDK.
azure-sdk-for-go go-mod-standards.instructions.md
Instructions for Azure/azure-sdk-for-go, a project described as: This repository is for active development of the Azure SDK for Go. For consumers of the SDK we recommend visiting our public developer docs at.
stackql AGENTS.md
Instructions for stackql/stackql, covering repository guidelines, project structure & module organization, build, test, and development commands, coding style & naming conventions and testing guidelines.
goai AGENTS.md
Instructions for zendev-sh/goai, covering agents.md - goai, commands, architecture, key rules and adding providers.