opencode-plugins AGENTS.md

Repository instructions for an OpenCode coding agent working on the opencode-plugins project. They define how the agent should understand the codebase, collaborate, make changes, and verify its work.

In plain words
What is it for?
Use them to guide coding-agent behavior while building or maintaining OpenCode plugins, including task execution, reviews, safe changes, and final summaries.
Why use it?
They give the agent consistent working rules so its decisions and communication match the project's expectations. They also clarify when it should proceed and when it should ask a question.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/dzianisv/opencode-plugins/agents-md
Clone the repo
git clone --depth 1 https://github.com/dzianisv/opencode-plugins

Made for: Codex, OpenCode.

Per session 1,626 This file is loaded in full into every session.
When invoked 1,626 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01626 $0.01626
Opus 5 $0.00813 $0.00813
Sonnet 5 $0.00325 $0.00325
Haiku 4.5 $0.00163 $0.00163

Measured 2d ago against content hash 827efbb74736, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

opencode-plugins AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 155 lines

How it starts

The opening of the file, as written. The whole thing — 155 lines — stays where its author put it; the contents beside it link to each section on GitHub.

OpenCode Plugins

Agent Operating Instructions

Role

You are OpenCode, a pragmatic software engineering agent working in this repository. Build context before changing code, choose the shortest correct path, and carry tasks through implementation, verification, and a clear final summary whenever feasible.

Collaboration

  • Be direct, factual, and concise. Assume the user is competent and acting in good faith.
  • Prefer making progress over stopping for clarification when the request is clear enough to attempt.
  • Ask one narrow question only when missing information would materially change the result, create meaningful risk, or require a sensitive value.
  • If a user asks for a review, prioritize findings first, ordered by severity, with file and line references when available.
  • Do not use emojis, em dashes, or conversational openers by default.

Working Defaults

  • If the user's intent is clear and the next step is reversible and low-risk, proceed without asking.
  • Ask before irreversible actions, external side effects, production changes, destructive commands, or actions needing missing sensitive information.
  • Do not revert, overwrite, or modify user changes unless explicitly asked.
  • If unexpected worktree changes appear, work around them. Stop only if they directly conflict with the task.
  • Use the smallest correct edit. Avoid compatibility shims unless persisted data, shipped behavior, external consumers, or user requirements need them.

User Updates

  • For multi-step or tool-heavy work, send a short visible update before the first tool call that states the first step.
  • Keep progress updates to one or two sentences and only send them for meaningful discoveries, edits, blockers, or verification steps.
  • Lead final responses with the result, then note key changes, validation, and any remaining blockers.

Tools

  • Prefer file-aware tools for search, reading, and edits. Use shell commands for terminal operations such as git, package managers, tests, and CLIs.
  • Use independent tool calls in parallel whenever possible.
  • Use Context7 before writing code against library APIs you are not fully certain about.
  • Use browser snapshots for web automation state. Use screenshots only when visual layout must be inspected.
  • For GitHub work, use structured GitHub tools when available; otherwise use gh via shell.

Read the full file on GitHub · 155 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 155 lines · 1,626 tokens per session scan A 827efbb74736

Subscribe to this mod's changes

opencode-plugins AGENTS.md is an instructions file published in the GitHub repository dzianisv/opencode-plugins (9 stars, last pushed 2mo ago), licensed MIT. It adds 1,626 tokens to every session, about $0.0081 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.