Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/dylanebert/shallot/agents-mdgit clone --depth 1 https://github.com/dylanebert/shallotWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.03259 | $0.03259 |
| Opus 5 | $0.01630 | $0.01630 |
| Sonnet 5 | $0.00652 | $0.00652 |
| Haiku 4.5 | $0.00326 | $0.00326 |
Grade B, and why
shallot AGENTS.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
Four groups under `examples/`, indexed by `examples/AGENTS.md` — one line per entry: the problem, the path, what it shows. The index is the retrieval surface; grep it before writing a pattern from scratch. The corpus con How it starts
The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Shallot
WebGPU game engine. The repo is the documentation: readable source with JSDoc contracts on every public export, a problem-indexed examples corpus, and this file plus .claude/rules/ as the behavioral contract. There is no docs site and no editor — agents and humans both read the source, the examples index (examples/AGENTS.md), and packages/shallot/AGENTS.md (the consumer-facing contract — how to build games on Shallot: ECS, plugins, GPU, render, physics, testing — shipped with the npm package). This file covers engine-internal layout and commands; behavioral constraints live in .claude/rules/.
Layout: packages/shallot/ (engine — src/engine/, src/standard/, src/extras/, src/project/ (manifest/generate/vite toolchain behind the CLI)), packages/create-shallot/ (the bun create shallot scaffold), packages/vscode-shallot/ (the VS Code extension), evals/ (the eval harness), examples/ (standalone projects).
Code is source of truth — elegant first, document what's non-obvious.
Rules
.claude/rules/style.md carries no paths: frontmatter: it applies to all engine code, always. The rest are path-scoped, and their globs match the path from the repo root (packages/shallot/…), not your cwd:
packages/shallot/src/standard/audio/**/*.ts,packages/shallot/rust/audio/**/*.rs→.claude/rules/audio.mdpackages/shallot/src/standard/avbd/**/*.ts,packages/shallot/tests/avbd/**/*.ts→.claude/rules/avbd.mdpackages/shallot/src/engine/**/*.ts,packages/shallot/src/standard/**/*.ts,packages/shallot/src/extras/**/*.ts,examples/**/*.scene,examples/**/*.ts→.claude/rules/ecs.mdexamples/**/*.ts,examples/**/*.scene,examples/AGENTS.md→.claude/rules/examples.mdpackages/shallot/src/**/*.ts,packages/shallot/package.json→.claude/rules/exports.mdpackages/shallot/src/engine/runtime/**/*.ts,packages/shallot/src/engine/utils/encode.ts,packages/shallot/src/standard/render/**/*.ts,packages/shallot/src/standard/sear/**/*.ts,packages/shallot/src/standard/part/**/*.ts,packages/shallot/src/standard/slab/**/*.ts,packages/shallot/src/standard/bvh/**/*.ts,packages/shallot/src/extras/{gltf,lines,outline,profile,skin,sky,sprite,text}/**/*.ts→.claude/rules/gpu.mdpackages/shallot/src/standard/physics/**/*.ts,packages/shallot/src/standard/character/**/*.ts,packages/shallot/src/standard/player/**/*.ts→.claude/rules/physics.mdpackages/shallot/src/standard/render/**/*.ts,packages/shallot/src/standard/sear/**/*.ts,packages/shallot/src/standard/glaze/**/*.ts,packages/shallot/src/standard/part/**/*.ts→.claude/rules/render.mdpackages/shallot/src/**/*.test.ts,packages/shallot/tests/**/*.ts,packages/shallot/bin/*.test.ts,packages/shallot/bin/*.probes.ts,scripts/install-test.ts,packages/shallot/scripts/build-tooling.ts→.claude/rules/testing.mdpackages/shallot/src/standard/tumble/**/*.ts,packages/shallot/rust/tumble/**,packages/shallot/tests/tumble/**,packages/shallot/scripts/build-tumble-kernel.ts,packages/shallot/scripts/run-tumble-fixtures.ts,packages/shallot/scripts/gen-tumble-fixtures.ts,packages/shallot/scripts/gen-tumble-gold.ts,packages/shallot/scripts/gen-tumble-sample-golds.ts,packages/shallot/scripts/tumble-exit-test.ts,examples/gym/src/tumble-*.ts,examples/gym/src/scenarios/**,scripts/bench-tumble.ts,scripts/tumble-interaction.ts,scripts/tumble-repro*,scripts/check-tumble-fp.ts→.claude/rules/tumble.mdexamples/**/*.html→.claude/rules/visual-identity.md
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 85 lines · 3,259 tokens per session scan B b81d4ff81b81
shallot AGENTS.md is an instructions file published in the GitHub repository dylanebert/shallot (317 stars, last pushed 4d ago), licensed MIT. It adds 3,259 tokens to every session, about $0.0163 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
Claw3D AGENTS.md
Instructions for iamlukethedev/Claw3D, covering agent instructions, cursor cloud specific instructions, service overview, running the app and lint, typecheck, and tests.
GameDesignOS AGENTS.md
Instructions for DY-2026/GameDesignOS, covering gamedesignos agent 入口, 默认接法, agent 执行规则, 什么时候用整个项目 and 每个 skill 单独怎么用.
Hermes3D AGENTS.md
Instructions for iamlukethedev/Hermes3D, covering agent instructions, development environment instructions, service overview, running the app and lint, typecheck, and tests.
awesome-defold AGENTS.md
Instructions for astrochili/awesome-defold: When asked to process the resource inbox, use GitHub issue #16 unless another issue is named.
unity-code-style-guide AGENTS.md
Instructions for krogh-jacobsen/unity-code-style-guide, covering agents.md — unity 6 c, project setup — edit this block, never do these — they corrupt the project, deprecated in unity 6 and if you read nothing else.
unreal-mcp CLAUDE.md
Instructions for GenOrca/unreal-mcp, covering claude.md, what this is, architecture (the non-obvious parts), commands and all run from mcp-server/.