Borrowing it
Nothing to install: this file belongs to hlsitechio/Omarchy-4-AI-Agent-MCP. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/hlsitechio/Omarchy-4-AI-Agent-MCP/main/AGENTS.mdgit clone --depth 1 https://github.com/hlsitechio/Omarchy-4-AI-Agent-MCPWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/hlsitechio/omarchy-4-ai-agent-mcp/agents-md)<a href="https://agentmods.dev/instructions/hlsitechio/omarchy-4-ai-agent-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/hlsitechio/omarchy-4-ai-agent-mcp/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/hlsitechio/omarchy-4-ai-agent-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/hlsitechio/omarchy-4-ai-agent-mcp/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01700 | $0.01700 |
| Opus 5 | $0.00850 | $0.00850 |
| Sonnet 5 | $0.00340 | $0.00340 |
| Haiku 4.5 | $0.00170 | $0.00170 |
Grade B, and why
Omarchy-4-AI-Agent-MCP AGENTS.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
2. **sudo needs pkexec** when run from an agent shell (no TTY). Use How it starts
The opening of the file, as written. The whole thing — 113 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md — omarchy-mcp
Context for any LLM/agent resuming work on this project. Read this first.
Project status
Working MCP server (TypeScript + Node, stdio) exposing Omarchy desktop commands
to any LLM. Built and smoke-tested (node smoke.mjs → SMOKE_OK).
- 108 tools implemented across
src/tools/{theme,appearance,capture,desktop,windows,agents,network,local-system,defaults,device-controls,local-launchers,shell-ui,plugin-local,dangerous,health}.tssrc/hypr.ts(introspection & verdict engine)
- Verification layer: mutating window tools return measured before/after state with STATUS/HINT verdicts (split_confirmed / opened_but_not_split / not_detected)
- Self-guard: PID-ancestry lock prevents closing/tile-killing the host terminal (window_close refuses; self_window_info / self_window_snap target by address)
- Native Lua grid layout installed: ~/.config/hypr/layouts.lua -> lua:omarchy-grid with modes grid|master, runtime cmds set/cols/rows/auto/tomaster/swap/debug/show, and MCP wrappers: layout_mode, layout_grid, layout_order, layout_tomaster, layout_swap_windows
- One-call coding-agent orchestration:
agent_gridlaunches homogeneous grids or mixed sparse placements (for example Claude top-right + Codex bottom-right), using per-agent app IDs and verified final geometry. The grid layout adds slot/slotlast/unslot/clearslots runtime messages for sparse cells. - Destructive tools gated by
enableDangerous(seesrc/config.ts) - Full coverage table with per-command status lives in
COMMANDS.md(markers:[x]tested,...in progress,[!]failed,[ ]not started)
Critical environment quirks (do not rediscover these)
- Hyprland 0.56 Lua config: raw IPC sockets are GONE
(
$XDG_RUNTIME_DIR/hypr/$SIG/.socket*does not exist). All dispatches must go through:hyprctl dispatch 'hl.dsp.<expr>'where the arg is a valid Lua expression, e.g.:hl.dsp.window.swap({ direction = "l" })hl.dsp.layout("preselect r")— next opened window lands in that splithl.dsp.window.resize({ x = 100, y = 0, relative = true })hl.dsp.window.float({ action = "toggle" })hl.dsp.exec_cmd("some-command")API surface discovered from/usr/share/omarchy/default/hypr/bindings/*.lua.
- sudo needs pkexec when run from an agent shell (no TTY). Use
pkexec pacman -S --noconfirm <pkg>for installs. dsp.window.resizeis RELATIVE by default. Exact sizing needsrelative = false. Without it, values act as deltas (caused a real bug: window collapsed to 116px). Window-address targeting works everywhere:window = "address:0x..."(discovered from omarchy-hyprland-window-pop).float({ action = "off" })TILES a floating window — never do this to the host terminal.action = "on"floats it.- Custom Lua layouts are native (no plugins):
~/.config/hypr/layouts.luaregisterslua:omarchy-grid(deterministic grid, aspect-aware auto mode). Runtime commands go to the ACTIVE layout's handler:hyprctl dispatch 'hl.dsp.layout("set 3 2")'/"auto"/"show". Existing workspaces KEEP their old layout on reload; switch them withhyprctl eval 'hl.workspace_rule({ workspace = "1", layout = "lua:omarchy-grid" })'. - Visual verification works:
capture_screenshotreturns a PNG path; agent can Read image files directly (no external vision API needed). - Closing a sibling of the host terminal: siblings can share the host's
PID (one ghostty process, many windows), so pid-based guards block them
too. Safe close-by-address recipe (all MCP):
hypr_dispatch("hl.dsp.window.cycle_next({ next = false })")to move focus off our window -> verify focused pid via desktop_status ->hypr_dispatch('hl.dsp.window.close({ window = "address:0x..." })')— address targeting works; the charset allow-list accepts it. Layout commands go through the ACTIVE layout:hl.dsp.layout("<msg>"). - Requires: Hyprland 0.56+ with the Lua config bridge,
omarchyCLI,wl-clipboard, and Node >= 20. - Mouse-focus hazard (input:follow_mouse=1): focus follows the user's
cursor, so "focused window" ops can silently re-target mid-command.
Mitigations now built in:
dispatchTracked()(src/tools/windows.ts) records which window was focused at dispatch + warns if focus moved (window_focus, window_swap, and all no-target fallbacks).- Destructive tools accept explicit
address/matchtargets (resolveTarget()in src/hypr.ts): window_resize, window_float_toggle, window_fullscreen, window_close, window_to_workspace. PREFER explicit targeting in agent flows;isSelfClient()guards close on any target. - Address-targeted swap works too:
hl.dsp.window.swap({ window = "address:0x...", direction = "u" })(verified live; error "No window to swap with in that direction" when the slot is empty). NOTE: float-toggle off can re-tile a window into a DIFFERENT slot — verify geometry after and restore if needed.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 113 lines · 1,700 tokens per session scan B c4e5a860ca68
Omarchy-4-AI-Agent-MCP AGENTS.md is an instructions file published in the GitHub repository hlsitechio/Omarchy-4-AI-Agent-MCP (1 stars, last pushed 7d ago), licensed MIT. It adds 1,700 tokens to every session, about $0.0085 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.