Borrowing it
Nothing to install: this file belongs to DefangLabs/defang. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/DefangLabs/defang/main/AGENTS.mdgit clone --depth 1 https://github.com/DefangLabs/defangWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/defanglabs/defang/agents-md)<a href="https://agentmods.dev/instructions/defanglabs/defang/agents-md"><img src="https://agentmods.dev/badge/instructions/defanglabs/defang/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/defanglabs/defang/agents-md"><img src="https://agentmods.dev/badge/instructions/defanglabs/defang/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00656 | $0.00656 |
| Opus 5.5 | $0.00262 | $0.00262 |
| Sonnet 5.5 | $0.00131 | $0.00131 |
| Haiku 4.5 | $0.00066 | $0.00066 |
Grade A, and why
defang AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 55 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Defang CLI Agent Guide
Keep this file short. It is loaded at startup by coding agents, so it should contain only rules that matter for most tasks.
Repository Basics
- This repository contains the Defang CLI, a Go command-line tool under
src/. - The root
Makefiledelegates tosrc/Makefile. - Work from
src/for Go commands unless a root command explicitly delegates there. - For deeper architecture context, read
docs/agent-reference.mdon demand instead of expanding this file.
Common Commands
- Build:
cd src && make build - Unit tests:
cd src && make testorcd src && go test -short ./... - Focused package test:
cd src && go test -short ./pkg/cli/compose/... - Lint:
cd src && make lint - Auto-fix lint:
cd src && make lint-fix - Tidy modules:
cd src && make tidy - Regenerate protos after editing
fabric.proto:cd src && make protos
Agent Enforcement
- Before committing Go changes, run
cd src && make lint. - If lint fails, run
cd src && make lint-fix, then rerun lint. - Before pushing Go changes, run
cd src && make testunless the user explicitly scopes verification differently. - Do not use
--no-verifyto bypass hooks. - If a required tool is missing in the environment, say exactly what could not run.
Go Change Quality
- Make the smallest coherent change that fixes the root problem.
- Put behavior in the package that owns the concept: commands orchestrate, session/stack code selects stacks, compose code loads compose projects, provider code handles cloud behavior.
- Avoid adding exported functions, options, or struct fields for one-off behavior.
- Do not split one invariant across packages unless that boundary already exists.
- Reuse existing Defang abstractions and standard library helpers before adding new helpers.
- Keep CLI commands thin: parse flags, construct existing managers, call domain logic, print results.
- Return real errors with context. Ignore missing optional files only when missing is the documented contract.
- Keep provider-generic code generic; provider-specific behavior belongs behind provider-specific implementations or explicit parameters.
- Comments should explain why, not restate what the code does.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 55 lines · 656 tokens per session scan A bab391d8ca96
defang AGENTS.md is an instructions file published in the GitHub repository DefangLabs/defang (167 stars, last pushed 3d ago), licensed MIT. It adds 656 tokens to every session, about $0.0026 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
defang AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| defang AGENTS.mdDefangLabs/defang | Instructions file | 167 | 3d ago | MIT | A | 656 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |