Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/gokay-ai/sheep/agents-mdgit clone --depth 1 https://github.com/gokay-ai/sheepWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/gokay-ai/sheep/agents-md)<a href="https://agentmods.dev/instructions/gokay-ai/sheep/agents-md"><img src="https://agentmods.dev/badge/instructions/gokay-ai/sheep/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.05189 | $0.05189 |
| Opus 5 | $0.02594 | $0.02594 |
| Sonnet 5 | $0.01038 | $0.01038 |
| Haiku 4.5 | $0.00519 | $0.00519 |
Grade A, and why
sheep AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 230 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Sheep is undo for AI coding agents: a herdr plugin that turns every agent
turn into a restorable checkpoint, rewinds one worktree to before an agent broke things, and then
tells that agent what was taken back. README.md is the user-facing version.
This file is the canonical instructions for anything working in this repository, human or agent.
CLAUDE.md is a pointer to it and holds nothing of its own, so the two cannot drift.
Read this before you touch src/. Sheep overwrites files on other people's machines. One
credible "sheep ate my uncommitted work" report ends the project, so parts of this codebase are
not free to change. Those parts are marked below.
Build, test, check
cargo build # target/debug/sheep
cargo test # the whole suite; this is the gate
cargo clippy --all-targets -- -D warnings # CI runs this on Linux and macOS
cargo fmt --check # rustfmt.toml pins the style
shellcheck herdr-plugin/install.sh herdr-plugin/scripts/*.sh
Everything but cargo build is a CI gate (.github/workflows/ci.yml).
Run at least cargo test and cargo clippy --all-targets -- -D warnings before you claim a change
works; -D warnings fires on different code per platform, which is why CI runs both legs.
Rust 1.85 or newer, edition 2021, no unsafe, no build script. There is nothing to install beyond a
toolchain and git on PATH.
The plugin half has its own two scripts, run by CI and runnable by hand:
bash herdr-plugin/scripts/test-install.sh # installer platform detection, PATH copy, keybindings, release matrix
bash herdr-plugin/scripts/test-watchd.sh # "exactly one recorder" under concurrent starts
test-watchd.sh builds its own plugin root and its own stand-in recorder and scopes every match
to that path, so a real sheep watch on the machine is neither counted nor killed. Neither script
needs a herdr session.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 230 lines · 5,189 tokens per session scan A ad8519282c76
sheep AGENTS.md is an instructions file published in the GitHub repository gokay-ai/sheep (5 stars, last pushed 7d ago), licensed MIT. It adds 5,189 tokens to every session, about $0.0259 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
herdmates CLAUDE.md
Instructions for caioniehues/herdmates, covering claude.md — project context for claude code, read in this order, hard rules, environment note and reference material in-repo.
Codewhale CLAUDE.md
Claude Code instructions for Hmbown/Codewhale, a project described as: Open-source coding agent for your terminal, built in Rust and on a journey of continuous community improvement. Issues and PRs welcome.
opentui AGENTS.md
AGENTS.md instructions for anomalyco/opentui, covering opentui agent guide, engineering, tooling and runtimes, verification and portable ffi.
tuicr AGENTS.md
AGENTS.md instructions for agavra/tuicr, covering agents.md - tuicr, project structure, key types, data flow and important implementation details.
critique AGENTS.md
AGENTS.md instructions for remorses/critique, covering opentui, using unreleased opentui versions, bun, react and rules.
cs CLAUDE.md
Claude Code instructions for boyter/cs, covering claude.md, project overview, build & test commands, architecture and query pipeline (pkg/search/).