helix-db AGENTS.md

helix-db AGENTS.md is an instructions file for Codex, OpenCode from HelixDB/helix-db. It costs 934 tokens per session, scanned C, original, Apache-2.0.

Repository instructions for HelixDB, a Rust database project, covering coding principles, testing, formatting, and key-value data handling.

In plain words
What is it for?
They help with Rust implementation, unit and documentation tests, coverage, Clippy checks, formatting, and database key construction and parsing.
Why use it?
They encourage clear type-safe code and verification, helping developers catch invalid states, edge cases, and style problems early.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/helixdb/helix-db/agents-md
Clone the repo
git clone --depth 1 https://github.com/HelixDB/helix-db

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for helix-db AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/helixdb/helix-db/agents-md.svg)](https://agentmods.dev/instructions/helixdb/helix-db/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/helixdb/helix-db/agents-md"><img src="https://agentmods.dev/badge/instructions/helixdb/helix-db/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 934 This file is loaded in full into every session.
When invoked 934 The same file — it is already loaded in full.
Security scan C 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00934 $0.00934
Opus 5 $0.00467 $0.00467
Sonnet 5 $0.00187 $0.00187
Haiku 4.5 $0.00093 $0.00093

Measured 4d ago against content hash e3b41eb4b447, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

helix-db AGENTS.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Hidden instructionshighPrompt injection

Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.

- ⁠match { Example(_) => ExampleVariant } -> use derive macro for Variant and the conversions instead of littering our code with the extra types and functions ⁠- ⁠instead of children structs holding an Arc<Db>, maybe jus
AGENTS.md · 58 lines

How it starts

The opening of the file, as written. The whole thing — 58 lines — stays where its author put it; the contents beside it link to each section on GitHub.

approach

  • ⁠Make invalid states unrepresentable using algebraic data types (e.g. enums).
  • ⁠Use code coverage tools to make sure unit test coverage covers every edge case. This should be easily doable if invalid states are unrepresentable.
  • Keep things modular.
  • Define clear contract boundaries for testability. Document them all, and make sure doc comment examples are ran as tests.
  • Use assertions for invariants when encoding within types is not feasible.
  • Use clippy and fix code smells reported.
  • Prefer iterators, monadic logic, and functional concepts. Where not possible for performance, document why.
  • Make invalid state unrepresentable.
  • Prefer importing modules over long lists of types. Using module::Type at call sites is fine, keeps names unambiguous, and reduces namespace-collision churn.
  • Be wary of things that don't scale. If you have reason to believe why it wont, report back to the user explaining why.
  • instead of if let { ... } use let Some(…) = … else { }
  • avoid over using helper functions where possible. duplicating a single line of code is clearer than polluting with helper functions. if a large piece of functionality is shared or repeated multiple times then it can be abstracted but you should favour inline code where possible. small pieces of functionality should be inlined instead of abstracted.
  • Stage and commit code locally in phases as you go.
  • As you make changes, if it is small (e.g. single/couple line addition) or if it is critical to your implementation, make the change.
  • Clean up any temporary files or directories you create during your work (including in /private/tmp)
  • ⁠match { Example(_) => ExampleVariant } -> use derive macro for Variant and the conversions instead of littering our code with the extra types and functions ⁠- ⁠instead of children structs holding an Arc, maybe just let them take in a &Db in every method that requires it.
  • when that's not feasible, evaluate whether passing in an Arc is fine, and if not make sure that holding an Arc won't leak the memory based on how the child is stored in parent.

Read the full file on GitHub · 58 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 58 lines · 934 tokens per session scan C e3b41eb4b447

Subscribe to this mod's changes

helix-db AGENTS.md is an instructions file published in the GitHub repository HelixDB/helix-db (5,886 stars, last pushed today), licensed Apache-2.0. It adds 934 tokens to every session, about $0.0047 per session on Opus 5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.