career-ops-ui AGENTS.md

Development instructions for career-ops-ui, a Node.js web interface for the career-ops project, including rules shared by different coding agents.

In plain words
What is it for?
Use them when modifying the interface, following the project’s specification-driven process, locating commands, or checking which instruction files apply.
Why use it?
They give agents a common project orientation and workflow so changes follow the project’s specifications regardless of which coding tool is used.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/fighter90/career-ops-ui/agents-md
Clone the repo
git clone --depth 1 https://github.com/Fighter90/career-ops-ui

Made for: Codex, OpenCode.

Per session 804 This file is loaded in full into every session.
When invoked 804 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00804 $0.00804
Opus 5 $0.00402 $0.00402
Sonnet 5 $0.00161 $0.00161
Haiku 4.5 $0.00080 $0.00080

Measured 3d ago against content hash 957787c60492, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

career-ops-ui AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 51 lines

How it starts

The opening of the file, as written. The whole thing — 51 lines — stays where its author put it; the contents beside it link to each section on GitHub.

career-ops-ui — Agent Instructions (Codex / generic CLI shim)

Read CLAUDE.md for the full project-level instructions, hard rules, conventions, and SDD pipeline. Everything in CLAUDE.md applies equally to Codex, Cursor, Aider, OpenAI's CLI, or any other agent driving this repo. This file exists so non-Claude CLIs find a canonical entry point.

Quick orientation

  • This is career-ops-ui v1.86.x — an Express + vanilla-JS SPA that puts a polished web interface on top of Fighter90/career-ops.
  • It runs as a regular Node ≥18 process. It is CLI-agnostic at runtime — the choice of agent CLI affects only the development workflow inside this repo, not the deployed UI.
  • Hard rules and parent-project boundary live in CLAUDE.md (root). Codex's CODEOWNERS-style additions, if any, layer on top.

CLI-specific notes

CLI Entry point Notes
Claude Code CLAUDE.md Native. Subagents in .claude/agents/, slash commands in .claude/commands/. SDD via gsd-* skills (superpowers@claude-plugins-official).
OpenAI Codex AGENTS.md (this file) Points to CLAUDE.md. No additional Codex-specific config required.
Gemini CLI GEMINI.md Points to CLAUDE.md.
Cursor / Continue CLAUDE.md Both honor CLAUDE.md by convention.
Aider CLAUDE.md Pass --read CLAUDE.md on first run if your aider version doesn't auto-detect.

Things every CLI must respect

  1. Never edit anything outside web-ui/. Parent career-ops files (../cv.md, ../config/, ../modes/, ../data/, ../reports/, …) are off-limits.
  2. Never weaken security headers. CSP excludes 'unsafe-inline' from script-src on purpose.
  3. Never bypass isValidJobUrl() for SSRF-relevant routes. Same for stripDangerousMarkdown() (CV markdown).
  4. Never commit .env. Use .env.example placeholders only.
  5. Tests must be CI-isolated. Don't assume the parent project layout exists outside tests/fixtures/ or mktemp -d.

Read the full file on GitHub · 51 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 51 lines · 804 tokens per session scan A 957787c60492

Subscribe to this mod's changes

career-ops-ui AGENTS.md is an instructions file published in the GitHub repository Fighter90/career-ops-ui (58 stars, last pushed 3d ago), licensed MIT. It adds 804 tokens to every session, about $0.0040 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

payload CLAUDE.md

Instructions for payloadcms/payload, covering claude.md, project structure, key directories, architecture notes and quick start.

payloadcms/payload · 5,127 tokens

payload AGENTS.md

Instructions for payloadcms/payload, a project described as: Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.

payloadcms/payload · 12 tokens

Claude-Code-Agent-Monitor CLAUDE.md

Instructions for hoangsonww/Claude-Code-Agent-Monitor, covering claude code working guide, project mission, repo map, non-negotiable engineering rules and commands you should know.

hoangsonww/Claude-Code-Agent-Monitor · 1,101 tokens

Claude-Code-Agent-Monitor AGENTS.md

Instructions for hoangsonww/Claude-Code-Agent-Monitor, covering codex project instructions, project intent, priorities, where to work and validation expectations.

hoangsonww/Claude-Code-Agent-Monitor · 653 tokens

mcp-app-typescript-template AGENTS.md

AGENTS.md instructions for pomerium/mcp-app-typescript-template, covering repository guidelines, project overview, development commands, quick start and all available commands.

pomerium/mcp-app-typescript-template · 5,171 tokens

AI-RAG-Assistant-Chatbot AGENTS.md

Instructions for hoangsonww/AI-RAG-Assistant-Chatbot, covering lumina codex guide, repository overview, scope rules, working rules and validation commands.

hoangsonww/AI-RAG-Assistant-Chatbot · 1,038 tokens