loopy AGENTS.md

Repository instructions for the Loopy project, which contains a public loop catalogue and an installable agent skill. They explain how to edit loops, protect special forms, handle authenticated voting, and deploy changes.

In plain words
What is it for?
Use them when adding or editing loops, changing the catalogue website or Loopy skill, publishing reviewed records, handling votes, or deploying the project.
Why use it?
They reduce the risk of changing the wrong part of the project or publishing catalogue data in the code repository. They also document rules for keeping deployed names and shared history intact.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/forward-future/loopy/agents-md
Clone the repo
git clone --depth 1 https://github.com/Forward-Future/loopy

Made for: Codex, OpenCode.

Per session 2,320 This file is loaded in full into every session.
When invoked 2,320 The same file — it is already loaded in full.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02320 $0.02320
Opus 5 $0.01160 $0.01160
Sonnet 5 $0.00464 $0.00464
Haiku 4.5 $0.00232 $0.00232

Measured yesterday against content hash 0a3a463498d1, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

loopy AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -sS "https://here.now/api/v1/publishes/{slug}/data/suggestions?limit=50" \
AGENTS.md · 202 lines

How it starts

The opening of the file, as written. The whole thing — 202 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Loopy Repository Operating Rules

This repository holds two separate but related parts:

  • Loop Library website — the public catalog (site shell, database, and rendering). All website code lives under loop-library/ (loop-library/site/, loop-library/worker/, loop-library/scripts/, loop-library/audits/).
  • Loopy skill — the installable agent skill in skills/loopy/, with the compatibility alias in skills/loop-library/.

The operating rules below govern the Loop Library website unless they call out the skill explicitly. Live URLs that contain /loop-library/ and the loop-library-forms Worker name are deployed identifiers and do not change with this repository layout.

Adding or editing loops

  • The production catalog database is the source of truth for public loops. The current Git tree holds application code and the content-free site shell. Do not commit published loop records, bootstrap data, generated loop pages, catalogs, feeds, sitemaps, or offline catalog fallbacks. Legacy public records remain in pre-migration Git history intentionally; do not rewrite shared history as part of routine catalog work.

  • Publish a reviewed loop from a JSON file outside the repository with:

    LOOP_PUBLISH_TOKEN=... \
      npm --prefix loop-library/worker run loop:publish -- /path/to/loop.json
    

    Use loop-library/worker/examples/loop.json as the record template. The command validates the complete record before writing it, and the Worker records every revision.

  • Every loop must have a stable slug, unique number, search title and description, contributor attribution, published and modified dates, practical context, verification criteria, category, keywords, and valid related-loop slugs.

  • Do not hand-edit the homepage, detail pages, catalogs, feed, sitemap, or Loopy skill content when publishing a database record. The Worker renders those public surfaces from the same record. New loops use the shared social card unless a reviewed HTTPS socialImageUrl is supplied.

  • Keep bootstrap and backup exports outside the repository with owner-only permissions. The one-time bootstrap command requires an explicit private file path; routine recovery exports use npm --prefix loop-library/worker run loops:export. Restore an export only into a fresh empty catalog with npm --prefix loop-library/worker run loops:restore; never overwrite a live catalog.

  • Changes to the site shell, Worker, schema, or renderers still go through GitHub. Run the full repository checks before committing those code changes:

Read the full file on GitHub · 202 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 202 lines · 2,320 tokens per session scan A 0a3a463498d1

Subscribe to this mod's changes

loopy AGENTS.md is an instructions file published in the GitHub repository Forward-Future/loopy (3,079 stars, last pushed 1mo ago), licensed MIT. It adds 2,320 tokens to every session, about $0.0116 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.