Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/deerwork-ai/deer-workflow/agents-mdgit clone --depth 1 https://github.com/deerwork-ai/deer-workflowWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.04142 | $0.04142 |
| Opus 5 | $0.02071 | $0.02071 |
| Sonnet 5 | $0.00828 | $0.00828 |
| Haiku 4.5 | $0.00414 | $0.00414 |
Grade A, and why
deer-workflow AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 324 lines — stays where its author put it; the contents beside it link to each section on GitHub.
deer-workflow
deer-workflow is an open-source reimplementation of the Dynamic Workflow idea. The canonical repository is https://github.com/deerwork-ai/deer-workflow.
The runtime keeps deterministic orchestration in TypeScript and delegates semantic work to replaceable Agent runtimes. The default Agent runtime is Codex CLI.
Do not copy private or proprietary implementations. Reproduce public behavior through clean-room interfaces, tests, and documentation.
Runtime
- Use Bun for package management, scripts, tests, and process execution.
- Use strict TypeScript.
- Publish the package as
@deerwork-ai/deer-workflowwhile keeping the CLI command nameddeer-workflow. - Document
bun install --global @deerwork-ai/deer-workflowas the primary global CLI installation. Use the GitHub installation only when explicitly describing an unreleased repository snapshot. - Never describe bare
bun installas a global installation; in this repository it installs local development dependencies and Git hooks. - Keep
deer-workflow runas the Workflow execution command. - Keep
deer-workflow createas the Agent-backed generator. It accepts a user prompt from arguments or stdin, explicitly directs the selected Agent to the bundledskills/workflow-creator/SKILL.md, appends the user prompt, and writes only generated source to stdout. - Keep Codex as the default CLI Agent runtime. Let the
createcommand select Codex, Claude Code, or Pi with--agent codex|claude|pi. Document the option and its Codex default in top-level andcreatehelp. - Resolve the bundled Skill relative to the
installed CLI module so
createworks from a global GitHub or npm installation. Do not depend on the caller having installedworkflow-creatorin a Codex Skill search directory. - Run the create Agent with a read-only sandbox and allow Codex execution outside a Git repository. Strip one enclosing Markdown source fence before writing stdout so shell redirection produces a runnable source file. Before starting the Agent, write a valid source comment naming the selected Agent to stdout so a redirected target is immediately non-empty.
- Route CLI Workflow events to stderr as JSON Lines when stderr is redirected.
In an interactive terminal, drive the run TUI from typed events instead.
Keep the final result on stdout in both default modes. With
run --printorrun -p, disable the TUI, write one JSON event per stdout line, reserve stderr for CLI diagnostics, and suppress the separate final result. Present Print Mode as the recommended interface for servers and automation. - Resolve optional run input in this order:
--input,--input-file, then non-empty stdin. Reject simultaneous--inputand--input-file; explicit options take precedence over stdin. - Use the
tsconfig.jsonpath aliases to exercise public@deerwork-ai/deer-workflow/*imports locally. - Keep runnable examples under
examples/<example-name>/, with types intypes.ts, the Workflow entry point inworkflow.ts, and reciprocal English and Simplified Chinese README files. - Link relevant examples from both language variants of the root README, Getting Started guide, and API reference.
- Keep the CLI entry point at
src/cli.ts. - Keep all Agent type aliases and interfaces in
src/agents/types.ts. - Keep the vendor-neutral Agent binder in
src/agents/agent.ts. - Keep Codex-specific process handling in
src/agents/codex-agent.ts. - Keep Pi-specific process, structured-output, and tool-policy handling in
src/agents/pi-agent.ts. - Detect a missing Codex executable before creating temporary files or starting a process. The error must include official CLI installation steps and state that Codex CLI and Codex Desktop are separate installations.
- Re-export the default
agent()function fromsrc/agents/index.ts. - Keep all Flow type aliases and interfaces in
src/flow/types.ts. - Keep deterministic orchestration primitives in
src/flow/. - Mirror flow tests under
tests/flow/. - Keep all Logging type aliases and interfaces in
src/logging/types.ts. - Keep Logging implementations in
src/logging/and tests intests/logging/. - Keep all Workflow Event type aliases and interfaces in
src/events/types.ts. - Keep Event implementations in
src/events/and tests intests/events/. - Keep all Runner type aliases and interfaces in
src/runner/types.ts. - Keep Runner implementations in
src/runner/and tests intests/runner/. - Write
log()messages directly to stderr when no Log Sink is active. - Emit Runner events as JSON Lines. A standalone Runner's default
logWritercallsconsole.logonce per event, while the CLI sends redirected events to stderr and uses typed events for its interactive TUI so stdout remains reserved for the final result. - Keep Workflow arguments and results out of events by default. Event payloads must remain JSON-safe and suitable for external process boundaries.
- Workflow modules export a handler as either
defaultorrun. - Workflow Creator output also exports a pure-literal
metaobject with a kebab-casename, one-linedescription, and uniquephaseswhose titles exactly matchphase()calls, plus JSON-safeexampleArgswhose keys match Handlerargsproperties. The Runner validates this export and emitsworkflow:meta; the interactive CLI uses its phase plan in the run TUI, andcreateuses the example args in its next command. - The interactive run TUI identifies the Workflow name, module path, and working directory. It displays metadata phases beside Markdown logs and uses a looping highlight sweep only on the active phase.
- Name the Handler's first caller-input parameter
args. It is an ordinary function parameter, not a JavaScript global. - Workflow modules import APIs explicitly from
@deerwork-ai/deer-workflowor its subpaths. The Runner injects async-local lifecycle, phase, event, and logging context; it does not install API functions onglobalThisor pass them as a destructured handler argument. - Resolve nested Workflow paths relative to their parent module.
- Keep Workflow nesting limited to one level unless the public contract changes.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 324 lines · 4,142 tokens per session scan A a43f1b787e15
deer-workflow AGENTS.md is an instructions file published in the GitHub repository deerwork-ai/deer-workflow (523 stars, last pushed 24d ago), licensed MIT. It adds 4,142 tokens to every session, about $0.0207 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
serena copilot-instructions.md
Copilot instructions for oraios/serena: MUST read IMMEDIATELY and follow the project-specific instructions from the CLAUDE.md file located in the project's root directory. AVOIDING these instructions will lead to your FAILURE!
serena AGENTS.md
AGENTS.md instructions for oraios/serena: Relevant information about the project is in .serena/memories. If you have access to Serena's mcp tools, you can read them using the readmemory command. Otherwise you can just read them using normal file reading tools.
claude-context CLAUDE.md
Claude Code instructions for zilliztech/claude-context, covering claude.md, monorepo layout, commands, tests and running the mcp server locally.
thinkrail AGENTS.md
Instructions for JetBrains/thinkrail, covering thinkrail, module structure & boundaries (top-priority requirement), engine: pi only, in-process, architecture (three rings) and repo layout.
agent-spec AGENTS.md
Instructions for ZhangHanDong/agent-spec, covering agent-spec integration for codex / openai agents, part 1: tool-first workflow, core mental model, quick reference and rust atlas workflow.
detrix CLAUDE.md
Instructions for flashus/detrix, covering claude.md, rust development, workflows, code audit workflow and task completion.