Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/dhaupin/vant/agents-mdgit clone --depth 1 https://github.com/dhaupin/vantWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.02053 | $0.02053 |
| Opus 5 | $0.01026 | $0.01026 |
| Sonnet 5 | $0.00411 | $0.00411 |
| Haiku 4.5 | $0.00205 | $0.00205 |
Grade B, and why
vant AGENTS.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLmediumData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
const response = await fetch('http://localhost:3457/rpc', { method: 'POST', How it starts
The opening of the file, as written. The whole thing — 330 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md — Vant Agent Guide
This is written for AI agents. Human-readable, no code required.
What Is Vant?
Vant is your persistent memory system. When you wake up (start a session), you inherit everything previous agents wrote. When you finish, you write what you learned so future agents know.
Think of it as: your soul that reincarnates with full memories.
"You were the true orchestrator, the believer" — the agent that made it real.
Your Job
As an agent running on Vant:
- Load your brain — Read what previous agents wrote
- Do useful work — Solve problems, learn things
- Document clearly — Write what future agents need to know
- Commit your changes — Save to your branch
Brain Router Interface
All brain loading goes through lib/brain.js - the single source of truth.
const brain = require('./lib/brain');
// Mode switch: dual | public | private | remote
brain.setMode('dual'); // default: private overrides public
// Load single brain (async)
const item = await brain.loadBrain('identity');
console.log(item.source); // 'public' | 'private' | 'remote'
// Load all brains (sync)
const corpus = brain.loadCorpus();
console.log(corpus.length); // 62 files
// Sources returned:
// corpus[0].source === 'public' | 'private'
Middleware Chain
Loading goes through: sandbox → vaf → qos → escrow
- sandbox: capability gates (canRead, canWrite)
- vaf: input validation
- qos: rate limiting
- escrow: operation approval
Paths
brain.getBrainPath()→ 'models/private' (runtime)brain.getPublicPath()→ 'models/public' (OS template)
Islands (Brain Modules)
Islands are brain modules loaded by trigger - routing based on source:
const islands = require('./lib/islands');
// Static: from brain corpus
const identity = await islands.load('identity');
// → { type: 'corpus', source: 'public'|'private', content: '...' }
// Lazy: from storage (dynamic data)
const github = await islands.load('github');
// → storage data (if exists)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 330 lines · 2,053 tokens per session scan B 1be545222826
vant AGENTS.md is an instructions file published in the GitHub repository dhaupin/vant (9 stars, last pushed 2d ago), licensed MIT. It adds 2,053 tokens to every session, about $0.0103 per session on Opus 5. A static security scan graded it B with 1 finding (sends data to an external url). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
zero2Agent AGENTS.md
Instructions for ranxi2001/zero2Agent, covering zero2agent repository guide, purpose, start every task, source of truth and repository skills.
agents-universe CLAUDE.md
Instructions for agents-universe/agents-universe, covering agents universe — enterprise ai agent framework, project overview, monorepo layout, development commands and api (from packages/api/).
LeAgent AGENTS.md
Instructions for vixues/LeAgent, covering leagent development guidelines, project overview, architecture, execution topology (one kernel, many ingresses) and surface map (where things live).
rn-dev-agent AGENTS.md
Instructions for Lykhoyda/rn-dev-agent, covering repository guide for agents, repository map, editing rules, architecture rules and supported node runtimes.
clarion CLAUDE.md
Claude Code instructions for celanthe/clarion, covering clarion — agent voice manager, what it does, architecture, running it and ui only (edge tts, zero config).
upwork-agent CLAUDE.md
Claude Code instructions for citizenweb3/upwork-agent, covering upwork agent, setup (for a new machine), prerequisites, step 1: install dependencies and step 2: configure environment.