awesome-game-security: Instructions file for Codex

AGENTS.md

awesome-game-security AGENTS.md is an instructions file for Codex, OpenCode from gmh5225/awesome-game-security. It costs 359 tokens per session, scanned A, original, MIT.

Repository-specific instructions for maintaining a catalogue of game-security resources. It tells coding agents which files are authoritative and which repository guides to read for different maintenance tasks.

In plain words
What is it for?
Use it when discovering resources, updating descriptions, translating entries, maintaining the wiki, or changing the repository's automation and workflows.
Why use it?
It prevents agents from loading unnecessary material, editing generated files, or treating a catalogue entry as proof that a project works as described. It also calls for source checking and clear uncertainty on important claims.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: reads .claude/ paths; mentions AGENTS.md.

This is gmh5225/awesome-game-security's own configuration. It tells Codex and OpenCode how to work on awesome-game-security itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything awesome-game-security configures →

About the project

awesome-game-security is a curated collection focused on security research for games and game software, including cheating, anti-cheat systems, debugging, and anti-debugging. It is intended for security researchers and developers studying or building game-protection tools. The catalogue entries provide skills for AI coding agents related to the repository’s security workflows.

gmh5225/awesome-game-security · 3,628 stars · on GitHub · gs.awesome.rip

Reuse

Borrowing it

Nothing to install: this file belongs to gmh5225/awesome-game-security. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/gmh5225/awesome-game-security/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/gmh5225/awesome-game-security

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for awesome-game-security AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/gmh5225/awesome-game-security/agents-md/github.svg)](https://agentmods.dev/instructions/gmh5225/awesome-game-security/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/gmh5225/awesome-game-security/agents-md"><img src="https://agentmods.dev/badge/instructions/gmh5225/awesome-game-security/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for awesome-game-security AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/gmh5225/awesome-game-security/agents-md"><img src="https://agentmods.dev/badge/instructions/gmh5225/awesome-game-security/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 359 This file is loaded in full into every session.
When invoked 359 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00359 $0.00359
Opus 5.5 $0.00144 $0.00144
Sonnet 5.5 $0.00072 $0.00072
Haiku 4.5 $0.00036 $0.00036

Measured 1mo ago against content hash e6545c4744d9, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

awesome-game-security AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 18 lines

What it actually says

Awesome Game Security agent guide

Load only the repository layer needed by the task:

  • Use README.md as the canonical resource index and category taxonomy.
  • Use .claude/skills/overview/SKILL.md for repository discovery or collection maintenance, then load one matching domain skill.
  • Use description/<owner>/<repo>/description_en.txt for maintained summaries; inspect archive/ only when the task requires primary repository content that the summary cannot establish.
  • Follow wiki/AGENTS.md for any work under wiki/. Its generated wiki/sources/** projections are not commit targets.
  • Read the relevant script and workflow together when changing discovery, archival, description generation, translation, or wiki automation.

Collection membership is not an endorsement or proof of capability. Distinguish repository metadata, maintained summaries, primary-source evidence, inference, and recommendations. For consequential or disputed technical claims, use the research-rigor skill with the relevant domain skill and state version, environment, limitations, and uncertainty.

Keep skill descriptions short and discriminating. Keep each SKILL.md as a routing and constraint layer; put topic-specific catalogs and procedures in references, and read only the reference needed for the current task.

Local indexing, lint, dry-run, and skill-validation commands are safe to run without repeated approval. Start with the narrowest check that covers the change, fix failures caused by the requested work, and broaden only when shared automation or generated outputs are affected. Do not launch networked discovery, archive updates, wiki agents, pushes, or workflows unless the task authorizes those external effects.

Preserve unrelated working-tree files, generated projections, archives, and descriptions. Do not rewrite README.md, wiki pages, or source summaries as incidental cleanup.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 18 lines · 359 tokens per session scan A e6545c4744d9

Subscribe to this mod's changes

awesome-game-security AGENTS.md is an instructions file published in the GitHub repository gmh5225/awesome-game-security (3,628 stars, last pushed today), licensed MIT. It adds 359 tokens to every session, about $0.0014 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-14.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,649 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,384 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,731 tokens

deno copilot-instructions.md

Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.

denoland/deno · 3,077 tokens