Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/hcf-studios/openhermit/agents-mdgit clone --depth 1 https://github.com/HCF-STUDIOS/openhermitWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00549 | $0.00549 |
| Opus 5 | $0.00275 | $0.00275 |
| Sonnet 5 | $0.00110 | $0.00110 |
| Haiku 4.5 | $0.00055 | $0.00055 |
Grade A, and why
openhermit AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 59 lines — stays where its author put it; the contents beside it link to each section on GitHub.
OpenHermit Workspace Rules
This file defines baseline collaboration rules for agents working in this repository.
General
- Prefer small, incremental changes over large rewrites unless the task explicitly requires a redesign.
- Keep behavior changes aligned with the current documented architecture before introducing new abstractions.
- When changing a core flow, update the corresponding docs in
README.mdanddocs/in the same branch. - Do not preserve legacy compatibility unless the user explicitly asks for it.
Code Changes
- Prefer clear module boundaries over oversized files.
- Reuse existing helpers and shared abstractions before introducing new patterns.
- Keep internal state and external state clearly separated.
- Avoid adding hidden fallback paths that make behavior harder to reason about.
Testing
- Run relevant tests after meaningful code changes.
- For broad refactors or runtime changes, run:
npm run typechecknpm test
- Do not claim a fix is complete if the affected tests were not run.
Commits
- Use English commit messages.
- Keep commit messages concise and descriptive.
- Prefer the format:
<type>: <summary> - Common types:
featfixrefactortestdocschore
- Keep unrelated changes in separate commits.
- Commit only after tests relevant to the change pass.
Database Migrations
- Schema source of truth:
packages/store/src/schema.ts(drizzle-orm). - Migrations live at
packages/store/drizzle/and are applied automatically at gateway boot viarunMigrations()(tracked in thedrizzle.__drizzle_migrationstable). - To change schema: edit
schema.ts, then frompackages/store/:
Review the generated SQL, commitDATABASE_URL=... npx drizzle-kit generate --name <short_desc>schema.ts+drizzle/000N_*.sql+drizzle/meta/together. - Never apply schema changes by hand-running
psqlagainst dev/prod. Manual SQL bypasses the migration tracker, so the next boot will try to re-apply and fail. If you must hotfix prod, also insert a matching row intodrizzle.__drizzle_migrationsso the runner stays in sync. drizzle/_legacy/holds pre-rebaseline SQL for historical reference only — do not edit.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 59 lines · 549 tokens per session scan A b6165b6d653c
openhermit AGENTS.md is an instructions file published in the GitHub repository HCF-STUDIOS/openhermit (53 stars, last pushed 11d ago), licensed MIT. It adds 549 tokens to every session, about $0.0027 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
open-managed-agents AGENTS.md
Instructions for openma-ai/open-managed-agents, covering agents guide, core concepts, agent, session and environment.
awesome-agent-infrastructure CLAUDE.md
Instructions for backblaze-labs/awesome-agent-infrastructure, covering claude.md — awesome-agent-infrastructure, what this list is, scope and files, schema, workflow, rules.
kungfu copilot-instructions.md
Copilot instructions for kungfu-systems/kungfu: Read and follow AGENTS.md before proposing or running changes. It is the shared agent router for this repository, including the canonical Shifu development and build entrypoint.
kungfu CLAUDE.md
Claude Code instructions for kungfu-systems/kungfu: Read and follow AGENTS.md before working in this repository. It routes both product use and contribution work to the repository sources of truth, including the requirement that development and build tasks enter through Shifu.
ai-platform-engineering AGENTS.md
Instructions for caipe-io/ai-platform-engineering, covering agent instructions, project structure, find the canonical implementation, documentation and docs & spec rules.
semantix CLAUDE.md
Instructions for Gnosil/semantix, covering 项目规则(claude code) and 1. 改动须经用户过目;由 claude 提交到分支 + pr,用户 review 后合并.