newsjack AGENTS.md

newsjack AGENTS.md is an instructions file for Codex, OpenCode from elvisun/newsjack. It costs 2,143 tokens per session, scanned A, original, MIT.

Repository instructions for newsjack, a Go command-line tool with a Next.js website and public skills for coding agents. They explain where the CLI, site, skills, fixtures, tests, and documentation belong.

In plain words
What is it for?
Use them when changing the newsjack CLI, website, public skills, fixtures, evaluation files, or local harness, and when deciding which file is the authoritative place for a behavior.
Why use it?
They help an agent find the correct project boundaries and keep user-facing instructions separate from test fixtures and internal evaluation files.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/elvisun/newsjack/agents-md
Clone the repo
git clone --depth 1 https://github.com/elvisun/newsjack

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for newsjack AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/elvisun/newsjack/agents-md.svg)](https://agentmods.dev/instructions/elvisun/newsjack/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/elvisun/newsjack/agents-md"><img src="https://agentmods.dev/badge/instructions/elvisun/newsjack/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 2,143 This file is loaded in full into every session.
When invoked 2,143 The same file — it is already loaded in full.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02143 $0.02143
Opus 5 $0.01071 $0.01071
Sonnet 5 $0.00429 $0.00429
Haiku 4.5 $0.00214 $0.00214

Measured 4d ago against content hash 32078df69cc1, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

newsjack AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- `apps/site/` - Next.js site and distribution build. `proxy.ts` routes curl/wget to `install.sh`; browser traffic gets the site.
AGENTS.md · 128 lines

How it starts

The opening of the file, as written. The whole thing — 128 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Guidance for coding agents working in this repo.

Repo Shape

  • apps/cli/ - Go CLI source for newsjack. Commands live in apps/cli/cmd/newsjack/.
  • apps/site/ - Next.js site and distribution build. proxy.ts routes curl/wget to install.sh; browser traffic gets the site.
  • bin/newsjack - source-checkout shim that runs the Go CLI with go run. Working in this repo, prefer this shim; ~/.newsjack/bin/newsjack is the end-user install path that public skills reference.
  • skills/ - public Newsjack skills. These are user-facing runtime instructions.
  • fixtures/ - local fixtures and smoke harnesses. Fixture-specific docs, scripts, prompts, and generated run folders belong here.
  • eval/ - evaluation artifacts, including reverse-newsjack methodology and dated run results.
  • harness/ - local agent/runtime harness support.
  • docs/ - planning and architecture notes.

Canonical Boundaries

  • Public skill behavior belongs in skills/*/SKILL.md and skill-local support files.
  • Fixture usage belongs in the relevant fixtures/*/README.md, scripts, or prompt files, not in public skills.
  • skills/newsjack-detector/SKILL.md is the canonical detector pipeline contract.
  • fixtures/newsjack-detector-agent/PROMPT.md should only point agents to the canonical detector skill and the fixture profile files. Do not duplicate run commands or profile lists there.
  • fixtures/newsjack-detector-agent/README.md owns fixture script usage.

Minimal Memory

Keep Newsjack as stateless as practical. Durable state creates hidden baggage on users' machines, makes behavior harder to reason about, and slows iteration.

  • Prefer explicit user-owned files, command inputs, and per-run artifacts over background memory.
  • If something can be regenerated with one prompt or one cheap deterministic command, do not save it as durable state.
  • If an LLM can derive something from live evidence in one prompt, prefer keeping that derivation in the skill/prompt layer instead of encoding a brittle approximation in Go.
  • Persist only state that has a clear product owner and lifecycle: monitor profiles, client briefs, schedules, credentials, run provenance, and recurring-run seen/suppression data.
  • Do not persist model-inferred topics, learned assumptions, ranking preferences, or other agent guesses unless the user explicitly promotes them into a profile or brief.
  • When state is necessary, make it inspectable, portable, and easy to delete. Avoid adding new local databases, caches, or hidden files unless they are clearly justified.
  • One-off commands should be as stateless as possible. Recurring monitors may use limited state for hygiene, but that state should not become the source of truth for discovery or judgment.

Read the full file on GitHub · 128 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 128 lines · 2,143 tokens per session scan A 32078df69cc1

Subscribe to this mod's changes

newsjack AGENTS.md is an instructions file published in the GitHub repository elvisun/newsjack (664 stars, last pushed 2d ago), licensed MIT. It adds 2,143 tokens to every session, about $0.0107 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.