Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/eljaja/bibavpn/agents-mdgit clone --depth 1 https://github.com/Eljaja/BibaVPNWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/eljaja/bibavpn/agents-md)<a href="https://agentmods.dev/instructions/eljaja/bibavpn/agents-md"><img src="https://agentmods.dev/badge/instructions/eljaja/bibavpn/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.10365 | $0.10365 |
| Opus 5 | $0.05182 | $0.05182 |
| Sonnet 5 | $0.02073 | $0.02073 |
| Haiku 4.5 | $0.01036 | $0.01036 |
Grade A, and why
BibaVPN AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
| `scripts/docker-smoke.sh` | `docker compose up`, `curl` via SOCKS and HTTP proxy, `down` | How it starts
The opening of the file, as written. The whole thing — 587 lines — stays where its author put it; the contents beside it link to each section on GitHub.
BibaVPN — context for agents and developers
This document is the fast-path briefing for humans and AI agents contributing to BibaVPN. It covers what the project is, how the code is laid out, the CLI knobs that actually matter on the wire, and the workflows you should follow before proposing a change.
For on-wire byte layouts see PROTOCOL.md. For install / run walkthroughs see README.md. For contributor etiquette see CONTRIBUTING.md.
Contents
- What the project is
- Repository layout
bibavpncrate modules- PSK tunnel wire (proto 3)
- Transport and WebSocket knobs
- Build and run (local)
- Server limits (hardening)
- Docker / Compose gotcha
- Scripts
- UDP design note (agents)
- Testing and benchmarks
- Security
- Stealth, DPI, and roadmap
- Logging (tracing)
- Guidelines for agents
- Scenarios that were validated
What the project is
BibaVPN is a proxy stack: local SOCKS5 (TCP CONNECT and
UDP ASSOCIATE) and optional HTTP CONNECT → TLS + WebSocket → remote
entry server → outbound TCP or UDP to the Internet.
The tunnel crypto on the wire is proto 3: shared PSK, opaque variable-length HELLO/ACK, ChaCha20-Poly1305, domain-separated KDF, sealed control opcodes, and inner UDP records in the same framing.
That proto-3 layout is carried over TLS + WebSocket; optional stealth layers sit on the outside (TLS client profile labels, padding modes, timing, decoys, optional multi-WSS, optional BoringSSL). Future inner opcodes / framing may evolve — see the roadmap section in PROTOCOL.md for targets that are not fully implemented here yet.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 587 lines · 10,365 tokens per session scan A bcbb21ce10c5
BibaVPN AGENTS.md is an instructions file published in the GitHub repository Eljaja/BibaVPN (57 stars, last pushed 3d ago), licensed MIT. It adds 10,365 tokens to every session, about $0.0518 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
GreenTunnel CLAUDE.md
Claude Code instructions for SadeghHayeri/GreenTunnel, covering greentunnel v3, commands, running the cli, ⚠️ npm run dev changes your real system proxy and layout.
mockserver-monorepo AGENTS.md
AGENTS.md instructions for mock-server/mockserver-monorepo, covering mockserver — agent instructions, instruction priority, project overview, local development environment and project documentation.
plano CLAUDE.md
Instructions for katanemo/plano, covering claude.md, build & test commands, rust — wasm plugins (must target wasm32-wasip1), rust — brightstaff binary (native target) and rust — tests, format, lint.
claude-tap AGENTS.md
Instructions for liaohch3/claude-tap, covering maintainer automation notes, agents 索引, documentation boundary, review guidelines and pre-commit hook.
hoop CLAUDE.md
Claude Code instructions for hoophq/hoop, covering claude.md, project overview, toolchain & prerequisites, architecture and module breakdown.
GoModel CLAUDE.md
Claude Code instructions for ENTERPILOT/GoModel, covering core principles, follow postel’s law, follow the twelve-factor app, keep it simple and use good defaults.