Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/dmytri/shipshape/agents-mdgit clone --depth 1 https://github.com/dmytri/shipshapeWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01623 | $0.01623 |
| Opus 5 | $0.00812 | $0.00812 |
| Sonnet 5 | $0.00325 | $0.00325 |
| Haiku 4.5 | $0.00162 | $0.00162 |
Grade A, and why
shipshape AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Instructions for Shipshape
This repository contains the Shipshape skill package. These instructions are for agents editing this repository, not for projects using Shipshape.
Agents using Shipshape should treat this entire repository as Captain/human-owned material, like assets/** in an adopting project: edit it only when explicitly asked, and do not treat it as disposable implementation or verification.
Scope
Shipshape is distributed as skill files:
| Path | Purpose |
|---|---|
skills/shipshape/SKILL.md |
Shared workflow rules and project setup templates |
skills/captain/SKILL.md |
Captain role skill |
skills/qm/SKILL.md |
Quartermaster role skill |
skills/crew/SKILL.md |
Crew Mate role skill |
skills/boatswain/SKILL.md |
Boatswain role skill |
skills/shipwright/SKILL.md |
Shipwright role skill |
skills/shipwright/templates.md |
Fitting-out scaffold templates: RIGGING.md, AGENTS.md, README block |
.plugin/plugin.json |
Vendor-neutral plugin manifest |
agents/ |
Role agents for context isolation (thin adapters over role skills) |
hooks/ |
Custody enforcement hooks (mechanize Article text only) |
commands/ |
Plugin slash commands (derived-state reporting and install diagnostics, no doctrine) |
rules/ |
Open-plugin rule files (.mdc): cited role checklists restating skill text, no added doctrine |
CAPTAIN.md |
Captain-only non-binding notes for this repository's own Shipshape work |
assets/logo.svg |
Plugin logo |
tests/ |
Hook behaviour, map drift, style, doctrine-home, and bulkhead conformance tests |
README.md |
Public project positioning and usage overview |
llms.txt |
Agent-facing index of canonical files (pointers only, no doctrine) |
shipshape.md |
Structural orientation map (names, relations, pointers; non-normative) |
skills.sh.json |
skills.sh registry metadata |
AGENTS.md |
Repository-local agent instructions |
Editing rules
- Keep repository guidance separate from downstream Shipshape usage guidance.
- Put public positioning in
README.md. - The README slogan is "Specifications are durable. Code is disposable. Agents are replaceable." It is a slogan, not doctrine. Keep it punchy. Do not rewrite it to match skill wording; the skills carry the precise three-layer doctrine.
- Put shared workflow rules in
skills/shipshape/SKILL.md. - Put role-specific rules in the matching role skill.
- Keep all role skills consistent with the Articles of Agreement in
skills/shipshape/SKILL.md. - Role skills are structured as jobs. A role's work divides into jobs. A job is entered by dispatch or by completion of the preceding job, and discovers work through exactly one retrieval: one question asked of one source, yielding one worklist. A job polices the quality of its own retrieval and of its own writes. Proof runs are execution, not retrieval. Incidental findings surfaced by a job's own work route by the Blocker policy; a duty that hunts through a second retrieval is a defect.
- A role duty MUST belong to a job, name its trigger in the role's walkthrough, read only evidence its job's retrieval or execution puts in front of it, and load no more context than its decision needs. Mechanize, move, or delete a duty that fails any of these.
shipshape.mdis a structural map: names, relations, and pointers only. A normative sentence in it is a defect. Update it with any rename it references;tests/map.shchecks the names against the skills.- Bump the
versionin.plugin/plugin.jsonwith any doctrine change, skill content included, not only a plugin-layer change to.plugin/,agents/,hooks/,commands/,assets/, orshipshape.md. A plugin-channel install's update tooling was observed gating on this version field rather than skill content hash; an unbumped skills-only change risks silent staleness for every plugin-channel consumer. - Enforcement claims are per-runtime. Claim a mechanism for a runtime only after live-fire verification on that runtime; name unverified runtimes unsupported for enforcement.
- Skills alone MUST fully instruct agents. The plugin layer (
.plugin/,agents/,hooks/,rules/) only mechanizes or restates what skill text already states. Every plugin artifact cites the skill text it enforces. Adding behaviour to the plugin layer that the skills do not state is a violation; fix the skill first, then mechanize it. Deleting the plugin layer must lose nothing but enforcement. - Use Shipshape Controlled English in skill files: short sentences, precise subjects, RFC 2119 terms where useful, and Canadian spelling such as
behaviour. Useartifact, notartefact. - The README Ship of Theseus section is the only text with relaxed Controlled English rules, for literary effect. Every other file follows Controlled English in full, including the punctuation rules: no em dashes and no parenthetical asides.
- Do not add project-specific assumptions from Jolly, Saleor, or other adopters to shared Shipshape rules.
- Do not create binding repository artifacts such as roadmaps, memory banks, decision logs, constitutions, or task lists unless the user explicitly asks.
- Do not update installed global skills or downstream project copies unless the user explicitly asks.
- Do not commit or push unless the user explicitly asks.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 83 lines · 1,623 tokens per session scan A 25b47280fb0d
shipshape AGENTS.md is an instructions file published in the GitHub repository dmytri/shipshape (7 stars, last pushed 28d ago), licensed 0BSD. It adds 1,623 tokens to every session, about $0.0081 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
selenium-boot CLAUDE.md
Claude Code instructions for seleniumboot/selenium-boot, covering claude.md, project overview, common commands, run all unit tests and full build (compile + test + package).
ontology-atlas AGENTS.md
Instructions for wlsdks/ontology-atlas, covering agents.md — ontology-atlas, product and non-negotiable architecture, start here, structure and routes and operating gates and skills.
matt-skills-with-to-goal CLAUDE.md
Instructions for tt-a1i/matt-skills-with-to-goal: Skills are organized into bucket folders under skills/.
coral CLAUDE.md
Instructions for cdknorow/coral, covering claude.md - coral go, mission, testing, go unit tests and legacy parity tools (historical reference).
pixir CLAUDE.md
Instructions for Ranvier-Technologies/pixir, covering pixir harness - legacy agent guide, current map and commands.
Agent-Memory-Bridge AGENTS.md
Instructions for zzhang82/Agent-Memory-Bridge, covering agent memory bridge contributor instructions, setup and checks, architecture boundaries, mutation and migration invariants and benchmark expectations.