scavi AGENTS.md

A set of instructions for AI coding assistants working on Scavi, an open-source tool that checks whether an agent's project context matches the codebase.

In plain words
What is it for?
Use it when developing or maintaining Scavi, especially when deciding how the tool should inspect repositories or when following its product and engineering rules.
Why use it?
It tells agents how Scavi works and sets engineering priorities, including using direct checks from files, configuration, Git, and code parsing when those can answer a question.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/hsr88/scavi/agents-md
Clone the repo
git clone --depth 1 https://github.com/hsr88/scavi

Made for: Codex, OpenCode.

Per session 1,830 This file is loaded in full into every session.
When invoked 1,830 The same file — it is already loaded in full.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01830 $0.01830
Opus 5 $0.00915 $0.00915
Sonnet 5 $0.00366 $0.00366
Haiku 4.5 $0.00183 $0.00183

Measured yesterday against content hash a169e53adc4f, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

scavi AGENTS.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Unrestricted tool accessmediumExcessive agency

A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.

* execute arbitrary commands extracted from documentation
AGENTS.md · 477 lines

How it starts

The opening of the file, as written. The whole thing — 477 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Scavi — Agent Instructions

Scavi is an open-source context linter for AI coding agents.

The context linter for AI coding agents. Keep your agents in sync with your code.

These instructions apply to AI coding agents working inside the Scavi repository.


Core principle

Scavi should never use an LLM when the repository can provide a deterministic answer.

This is the most important architectural rule in the project.

Before introducing an LLM call, ask:

  1. Can this be determined from the filesystem?
  2. Can this be determined from a manifest or configuration file?
  3. Can this be determined from Git metadata?
  4. Can this be determined through static parsing?
  5. Can this be determined through deterministic repository search?

If the answer to any of these is yes, do not use an LLM.

Examples of deterministic checks:

  • whether a referenced path exists
  • whether a package script exists
  • which package manager the repository uses
  • whether a dependency is installed
  • what version is declared in a manifest
  • whether a referenced file exists
  • whether two context files give conflicting package-manager instructions

LLMs are reserved for claims that require semantic interpretation.


Product behavior

Scavi validates instructions intended for AI coding agents against the actual repository.

Initial context formats include:

AGENTS.md
CLAUDE.md
GEMINI.md
.github/copilot-instructions.md
.cursor/rules/*.mdc

Scavi should detect:

  • stale instructions
  • invalid paths
  • invalid commands
  • outdated dependency/version claims
  • package-manager mismatches
  • missing referenced files
  • conflicting instructions across context files
  • semantic claims that no longer match implementation

Engineering priorities

When making implementation decisions, prioritize in this order:

  1. correctness
  2. low false-positive rate
  3. explainability
  4. deterministic behavior
  5. privacy
  6. performance
  7. extensibility

A context linter that produces noisy warnings will be disabled.

Read the full file on GitHub · 477 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 477 lines · 1,830 tokens per session scan B a169e53adc4f

Subscribe to this mod's changes

scavi AGENTS.md is an instructions file published in the GitHub repository hsr88/scavi (1 stars, last pushed 3d ago), licensed MIT. It adds 1,830 tokens to every session, about $0.0092 per session on Opus 5. A static security scan graded it B with 1 finding (unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.