Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/falense/openpaper/agents-mdgit clone --depth 1 https://github.com/falense/openpaperWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00260 | $0.00260 |
| Opus 5 | $0.00130 | $0.00130 |
| Sonnet 5 | $0.00052 | $0.00052 |
| Haiku 4.5 | $0.00026 | $0.00026 |
Grade B, and why
openpaper AGENTS.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
grep -l 'bypassPermissions' ~/.claude/projects/-home-sondre-Repositories-OpenPaper/*.jsonl What it actually says
OpenPaper
Docker Session Logs
The docker-compose.yml bind-mounts ~/.claude into the container, so containerized runs (both the interactive service and the test service via test_flow.py) write session logs to the same project directory as host sessions: ~/.claude/projects/-home-sondre-Repositories-OpenPaper/.
To identify container-originated sessions:
- Agent SDK sessions (
test_flow.pydual-agent harness): first JSONL line has"type":"queue-operation"and messages use"permissionMode":"bypassPermissions". The initial user message is the test script's prompt ("I want to set up OpenPaper…"). - Interactive container sessions (
docker-compose --profile interactive): first line has"type":"mode"(like normal CLI sessions) but also use"permissionMode":"bypassPermissions". Cross-reference with~/.claude/sessions/*.jsonwhere the session metadata may include anamefield (e.g."docker-setup-openpaper").
Quick grep to list all container sessions:
grep -l 'bypassPermissions' ~/.claude/projects/-home-sondre-Repositories-OpenPaper/*.jsonl
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 16 lines · 260 tokens per session scan B 2b55de62b40a
openpaper AGENTS.md is an instructions file published in the GitHub repository falense/openpaper (15 stars, last pushed 2mo ago), licensed MIT. It adds 260 tokens to every session, about $0.0013 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
google-news-api AGENTS.md
Instructions for ma2za/google-news-api, covering agent instructions, mandatory context discovery, project, development and releases.
wdoc CLAUDE.md
Claude Code instructions for thiswillbeyourgithub/wdoc, covering claude.md, project overview, commands, install and test.
newsworker AGENTS.md
Instructions for ivbeg/newsworker: These instructions are for AI assistants working in this project.
deepagents AGENTS.md
Instructions for langchain-ai/deepagents, covering global development guidelines for the deep agents monorepo, corridor security analysis, development workflow, suppressing ruff rules and pr conventions.
autoharness AGENTS.md
Instructions for tigerless-labs/autoharness: This repo uses Open Knowledge — collaborative markdown via MCP. .open-knowledge/config.yml (with optional /.open-knowledge/config.yml; CLI/env may override) is the path contract: content.dir is the root for relative paths; content.include lists globs that add markdown…
cookiecutter-mlops-package AGENTS.md
Instructions for fmind/cookiecutter-mlops-package, covering agents.md, project overview, setup & core commands, definition of done and conventions & idioms.