elnora-plugins AGENTS.md

Project instructions for elnora-plugins, a marketplace package containing nine agent skills and a connection to the Elnora AI Platform through MCP, a standard way for agents to call external tools.

In plain words
What is it for?
Setting up the MCP connection, choosing tools for health checks, project and task operations, and installing the skills in an agent environment.
Why use it?
They explain which skill and platform tool matches each request and clarify that the repository contains configuration and instructions, not the platform server or credentials.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/elnora-ai/elnora-plugins/agents-md
Clone the repo
git clone --depth 1 https://github.com/Elnora-AI/elnora-plugins

Made for: Codex, OpenCode.

Per session 1,655 This file is loaded in full into every session.
When invoked 1,655 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01655 $0.01655
Opus 5 $0.00827 $0.00827
Sonnet 5 $0.00331 $0.00331
Haiku 4.5 $0.00166 $0.00166

Measured 2d ago against content hash 8c70e66cd529, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

elnora-plugins AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 85 lines

How it starts

The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Universal guide for any coding agent working with elnora-plugins. Read natively by Codex, Cursor, Aider, Continue, Amp, Jules, and Roo. Claude Code reads CLAUDE.md instead — but note this repo's CLAUDE.md is the marketplace-maintainer guide, not a copy of this file (see Claude Code below).

What this is

elnora-plugins is the Elnora AI plugins marketplace: one Claude Code plugin (elnora) bundling 9 Agent Skills plus an MCP server declaration for the Elnora AI Platform at https://mcp.elnora.ai/mcp. It ships client-side configuration only — no CLI in this repo, no server code, no credentials. Agents drive the platform by invoking the Elnora MCP tools; the skills tell you which tool serves which intent.

Every skill routes to MCP tools named elnora_* (e.g. elnora_health_check, elnora_projects_list, elnora_tasks_create). Under a namespaced MCP client the same tools surface as elnora__elnora_* (or mcp__elnora__elnora_* in Claude Code).

Setup

Every platform needs two things: (1) the MCP server connection and (2) the skill files copied into your tool's skills directory.

MCP config — use wherever your platform expects MCP server definitions:

{ "mcpServers": { "elnora": { "type": "http", "url": "https://mcp.elnora.ai/mcp" } } }

Skills:

cp -r elnora/skills/* <your-tool-skills-dir>/   # e.g. .cursor/skills, .codex/skills, .vscode/skills, .gemini/skills

Authentication happens on the first MCP call — OAuth 2.1 (browser popup, recommended) or an API key generated at platform.elnora.ai. For a guided, gated walkthrough (verify → auth → smoke test), point your agent at INSTALL_FOR_AGENTS.md.

Dispatch — which skill for what

User intent Skill Representative MCP tools
Generate / iterate a protocol; manage tasks + messages elnora-tasks elnora_tasks_create, elnora_tasks_send, elnora_protocols_generate
Projects — list, create, members elnora-projects elnora_projects_list
Files — list, read, upload, version, fork/promote, working copies elnora-files elnora_files_list, elnora_files_content, elnora_files_upload, elnora_files_version
Folders / knowledge-base tree elnora-folders elnora_folders_list, elnora_folders_create, elnora_folders_move
Search tasks / files / everything by keyword elnora-search elnora_files_search
Organizations, members, invitations, billing, shared library elnora-orgs elnora_orgs_get, elnora_orgs_invite, elnora_library_files
Auth, API keys, health, account, audit log, feature flags, agreements elnora-admin elnora_health_check, elnora_account_get, elnora_audit_list, elnora_flags_list
Scientific tools + literature (PubMed / ArXiv / web) via the cloud agent elnora-agent elnora_ask_agent
General "how do I use Elnora" / routing elnora-platform routes to the domain skill above

Read the full file on GitHub · 85 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 85 lines · 1,655 tokens per session scan A 8c70e66cd529

Subscribe to this mod's changes

elnora-plugins AGENTS.md is an instructions file published in the GitHub repository Elnora-AI/elnora-plugins (4 stars, last pushed 6d ago), licensed Apache-2.0. It adds 1,655 tokens to every session, about $0.0083 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.