Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/helixdb/helix-db/agents-mdgit clone --depth 1 https://github.com/HelixDB/helix-dbWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/helixdb/helix-db/agents-md)<a href="https://agentmods.dev/instructions/helixdb/helix-db/agents-md"><img src="https://agentmods.dev/badge/instructions/helixdb/helix-db/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00934 | $0.00934 |
| Opus 5 | $0.00467 | $0.00467 |
| Sonnet 5 | $0.00187 | $0.00187 |
| Haiku 4.5 | $0.00093 | $0.00093 |
Grade C, and why
helix-db AGENTS.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
- match { Example(_) => ExampleVariant } -> use derive macro for Variant and the conversions instead of littering our code with the extra types and functions - instead of children structs holding an Arc<Db>, maybe jus How it starts
The opening of the file, as written. The whole thing — 58 lines — stays where its author put it; the contents beside it link to each section on GitHub.
approach
- Make invalid states unrepresentable using algebraic data types (e.g. enums).
- Use code coverage tools to make sure unit test coverage covers every edge case. This should be easily doable if invalid states are unrepresentable.
- Keep things modular.
- Define clear contract boundaries for testability. Document them all, and make sure doc comment examples are ran as tests.
- Use assertions for invariants when encoding within types is not feasible.
- Use clippy and fix code smells reported.
- Prefer iterators, monadic logic, and functional concepts. Where not possible for performance, document why.
- Make invalid state unrepresentable.
- Prefer importing modules over long lists of types. Using
module::Typeat call sites is fine, keeps names unambiguous, and reduces namespace-collision churn. - Be wary of things that don't scale. If you have reason to believe why it wont, report back to the user explaining why.
- instead of if let { ... } use let Some(…) = … else { }
- avoid over using helper functions where possible. duplicating a single line of code is clearer than polluting with helper functions. if a large piece of functionality is shared or repeated multiple times then it can be abstracted but you should favour inline code where possible. small pieces of functionality should be inlined instead of abstracted.
- Stage and commit code locally in phases as you go.
- As you make changes, if it is small (e.g. single/couple line addition) or if it is critical to your implementation, make the change.
- Clean up any temporary files or directories you create during your work (including in /private/tmp)
- match { Example(_) => ExampleVariant } -> use derive macro for Variant and the conversions instead of littering our code with the extra types and functions - instead of children structs holding an Arc, maybe just let them take in a &Db in every method that requires it.
- when that's not feasible, evaluate whether passing in an Arc is fine, and if not make sure that holding an Arc won't leak the memory based on how the child is stored in parent.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 58 lines · 934 tokens per session scan C e3b41eb4b447
helix-db AGENTS.md is an instructions file published in the GitHub repository HelixDB/helix-db (5,886 stars, last pushed today), licensed Apache-2.0. It adds 934 tokens to every session, about $0.0047 per session on Opus 5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
hugegraph AGENTS.md
AGENTS.md instructions for apache/hugegraph, covering agents.md, stack & modules, code search anchors, build and all modules.
automem CLAUDE.md
Instructions for verygoodplugins/automem, covering claude.md, project overview, development commands, setup environment and development.
atlas-mcp-server CLAUDE.md
Instructions for cyanheads/atlas-mcp-server, covering claude.md, essential development commands, build and development, database operations and running the server.
knowledge-graph-system CLAUDE.md
Instructions for aaronsb/knowledge-graph-system, covering knowledge graph system - claude development guide, project overview, quick start, platform lifecycle and updates (pull images, no restart).
frankengraphdb AGENTS.md
AGENTS.md instructions for Dicklesworthstone/frankengraphdb, covering agents.md — frankengraphdb, rule 0 — the fundamental override prerogative, rule number 1: no file deletion, branch policy and project mission.
seekstone CLAUDE.md
Instructions for shaqmughal/seekstone, covering claude.md, what this repo is, commands, the harness itself (run after npm install) and architecture.