Borrowing it
Nothing to install: this file belongs to defkode/orbx. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/defkode/orbx/main/AGENTS.mdgit clone --depth 1 https://github.com/defkode/orbxWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/defkode/orbx/agents-md)<a href="https://agentmods.dev/instructions/defkode/orbx/agents-md"><img src="https://agentmods.dev/badge/instructions/defkode/orbx/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/defkode/orbx/agents-md"><img src="https://agentmods.dev/badge/instructions/defkode/orbx/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01865 | $0.01865 |
| Opus 5.5 | $0.00746 | $0.00746 |
| Sonnet 5.5 | $0.00373 | $0.00373 |
| Haiku 4.5 | $0.00186 | $0.00186 |
Grade A, and why
orbx AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 123 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
This file — also read as CLAUDE.md (a symlink to it) — provides guidance to coding agents (Claude Code, GitHub Copilot CLI, and others) when working with code in this repository.
What this is
orbx (Orbstack linuX) is a single-file, zero-dependency Bash CLI that
spins up per-project OrbStack Linux machines. It derives
a machine name from $PWD, mounts the project into the VM, provisions it from a
cloud-init template, waits for readiness, and shells in. All product code lives
in one script: bin/orbx.
Commands
bats test/ # run all tests
bats test/shellrun.bats # run one file
bats -f "run forwards flags" test/ # run tests matching a name
shellcheck bin/orbx test/helpers/orb-stub script/release # lint (CI pins v0.11.0)
script/release X.Y.Z # cut a release (see below)
There is no build step — bin/orbx is the shipped artifact.
Architecture
Dual-mode script. bin/orbx runs as an executable or is sourced. The
guard at the bottom (if [[ "${BASH_SOURCE[0]}" == "${0}" ]]) means main
runs only when executed; when sourced, only the orbx::* functions load. Tests
rely on this: orbx_source (unit-test individual functions) vs orbx_run
(integration through main). set -euo pipefail is set inside that guard, so
it does not apply when sourced.
Config layering. Precedence, most-specific wins:
CLI flags > ./.orbxrc > ~/.orbx/config > built-in defaults.
orbx::effective_config merges the two flat key = value files over defaults;
orbx::resolve_context then re-reads that plus the parsed ORBX_FLAG_* vars and
populates the ORBX_* run-state globals every command reads. Config is parsed
line-by-line (orbx::parse_config_file) and never sourced or eval'd — a
config file can't execute code. Keep it that way. Values can't contain #
(everything after # is a comment).
Template resolution. Templates are cloud-init YAML. A bare name is resolved
through a search path (orbx::resolve_template): $ORBX_TEMPLATE_DIR →
~/.orbx/templates → bundled dir → <script>/../templates. A user file shadows
the bundled one of the same name. A path-shaped value — one with an explicit
./, ../, / or ~/ prefix, or a .yaml/.yml extension — skips the search
path entirely and is used as given, resolved against $PWD (the same anchor as
./.orbxrc). That is what lets a repo commit its own template alongside its
config; the two forms are disjoint, so a bare name never changes meaning.
ORBX_BUNDLED_TEMPLATE_DIR is the literal @TEMPLATE_DIR@ placeholder in-repo;
the Homebrew formula rewrites it at install time (unstamped in a git checkout,
which is why the <script>/../templates fallback exists).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +19 lines · +316 tokens per session f194de0899b4
- 1mo ago First seen · 104 lines · 1,549 tokens per session scan A d3c86fde95e0
orbx AGENTS.md is an instructions file published in the GitHub repository defkode/orbx (6 stars, last pushed 1mo ago), licensed MIT. It adds 1,865 tokens to every session, about $0.0075 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
deepseek-harness AGENTS.md
AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.