pi-agent-browser-native: Instructions file for Codex

AGENTS.md

pi-agent-browser-native AGENTS.md is an instructions file for Codex, OpenCode from fitchmultz/pi-agent-browser-native. It costs 16,619 tokens per session, scanned A, original, MIT.

Instructions for a native pi integration of agent-browser, a command-line browser tool, without bundling the browser itself. They describe supported versions, documentation, commands, and how the integration should pass requests through.

In plain words
What is it for?
Using agent-browser from pi, checking its supported baseline, maintaining the wrapper, and documenting commands and tool-result categories.
Why use it?
They keep the integration aligned with the separate browser tool and avoid adding behavior that conflicts with it.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions subagents; mentions AGENTS.md; mentions Codex.

This is fitchmultz/pi-agent-browser-native's own configuration. It tells Codex and OpenCode how to work on pi-agent-browser-native itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything pi-agent-browser-native configures →

Reuse

Borrowing it

Nothing to install: this file belongs to fitchmultz/pi-agent-browser-native. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/fitchmultz/pi-agent-browser-native/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/fitchmultz/pi-agent-browser-native

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for pi-agent-browser-native AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/fitchmultz/pi-agent-browser-native/agents-md/github.svg)](https://agentmods.dev/instructions/fitchmultz/pi-agent-browser-native/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/fitchmultz/pi-agent-browser-native/agents-md"><img src="https://agentmods.dev/badge/instructions/fitchmultz/pi-agent-browser-native/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for pi-agent-browser-native AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/fitchmultz/pi-agent-browser-native/agents-md"><img src="https://agentmods.dev/badge/instructions/fitchmultz/pi-agent-browser-native/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 16,619 This file is loaded in full into every session.
When invoked 16,619 The same file — it is already loaded in full.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.16619 $0.16619
Opus 5.5 $0.06648 $0.06648
Sonnet 5.5 $0.03324 $0.03324
Haiku 4.5 $0.01662 $0.01662

Measured 3d ago against content hash 534ce9692c78, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

pi-agent-browser-native AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

**Opt-in real upstream contract:** `npm run verify -- real-upstream` runs the sessionless plugin probe first, then every remaining declaration (including explicit native text) in a separate fail-fast `--test-force-exit`
AGENTS.md · 242 lines

How it starts

The opening of the file, as written. The whole thing — 242 lines — stays where its author put it; the contents beside it link to each section on GitHub.

pi-agent-browser-native

Native pi integration of agent-browser as a pi tool.

Product-specific guidance

  • Do not bundle agent-browser in this project.
  • Assume agent-browser is installed separately and available on PATH.
  • Baseline docs and verification against the current recommended agent-browser release. Runtime support uses the stable minimum in scripts/agent-browser-target.mjs (currently 0.35.0) with no upper cap and no version-specific compatibility shims.
  • Do not add backwards-compatibility shims for unsupported upstream versions.
  • Keep the integration thin and close to upstream agent-browser behavior.
  • Agent usability is the product boundary. Do not add wrapper-owned authorization or safety gates around upstream-supported commands, paths, sessions, state, restore, profiles, config, file access, launch arguments, or environment variables. Invoking agent_browser authorizes the requested upstream capability; pass it through and let upstream, the browser, and the operating system enforce their own contracts. Wrapper validation is for input shape, process integrity, lifecycle correctness, and truthful evidence—not for deciding what the agent or operator may do.
  • The primary UX is the agent invoking the native tool directly, not a slash-command-heavy manual workflow.
  • Do not overengineer or solve hypothetical problems that do not exist in observed behavior.
  • Do not add a reusable named "browser recipe" runtime layer on top of browser code, advanced tools, or native batch without new dogfood evidence and an explicit design pass; the current no-adopt decision and revisit criteria live in docs/ARCHITECTURE.md and docs/SUPPORT_MATRIX.md.
  • Require Node 24.21.0+ and Pi 1.5.0+ for this contract; retain locked development dependencies as reproducible snapshots, keep optional runtime peers wildcard, and qualify the latest stable official Pi and latest maintained fork main independently. Resolve version/commit once per workflow run and retain exact SDK/CLI evidence; never use the support floor or locked snapshot as a validation target. Do not activate the Pi-1.5 package on pre-1.5 sessions before the coordinated runtime cutover.
  • Thoroughly check official pi docs/examples/source behavior before inventing bespoke integration patterns. Prefer an official pi mechanism whenever one exists.
  • Prioritize the global install path first. Most users will install this extension globally, not as a project-local extension.
  • Keep the local extension-side documentation good enough that an agent can use the tool without relying on direct agent-browser binary help; when upstream agent-browser changes, update the repo-readable command reference, prompt guidance, README/docs, and any relevant tests in the same work.
  • Work in an isolated worktree and preserve unrelated user and agent changes; other operators may be working in this repository.
  • Clean up scratch files, temp artifacts, browser sessions, tmux sessions, and other side effects created by this task or verified as task-owned. Preserve unrelated resources, explicit user artifacts, Pi transcripts, and subagent records; investigate unknown ownership before cleanup.

Read the full file on GitHub · 242 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago Changed · +1 tokens per session 534ce9692c78
  2. 4d ago Changed · -4 tokens per session ce6207cdee75
  3. 5d ago Changed 5f8ab7017d66
  4. 6d ago Changed · +43 tokens per session 78a05e285ab6
  5. 7d ago Changed · +169 tokens per session 268672cbdd90
  6. 13d ago Changed 64ffa7be0995
  7. 15d ago Changed · +110 tokens per session 9fc58c786d8b
  8. 17d ago Changed · +39 tokens per session a61421b9dd2f
  9. 20d ago Changed · +8 lines · +344 tokens per session 95104ee8767d
  10. 24d ago First seen · 234 lines · 15,917 tokens per session scan A 89cb3d346158

Subscribe to this mod's changes

pi-agent-browser-native AGENTS.md is an instructions file published in the GitHub repository fitchmultz/pi-agent-browser-native (249 stars, last pushed 3d ago), licensed MIT. It adds 16,619 tokens to every session, about $0.0665 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

pi-agent-browser-native AGENTS.md compared with instructions from other repositories

pi-agent-browser-native AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
pi-agent-browser-native AGENTS.mdfitchmultz/pi-agent-browser-nativeInstructions file2493d agoMITA16,619Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149ktodayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file275k2d agoMITA4,313Codex, OpenCode