agentmods.dev

pinot-pi: Instructions file for Codex

AGENTS.md

pinot-pi AGENTS.md is an instructions file for Codex, OpenCode from jbstavers/pinot-pi. It costs 182 tokens per session, scanned A, original, MIT.

Instructions for Pinot Pi, an independent package that adds a workflow to the Pi coding agent. They define where user state is stored, how setup and inspection work, and which tests to run.

In plain words
What is it for?
They are for developing and checking Pinot Pi, running its setup command, controlling its state directory and validating changes with tests and type checks.
Why use it?
They keep the package independent and public-safe while preventing loading the extension from writing files or reading private credentials and session data.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md.

This is jbstavers/pinot-pi's own configuration. It tells Codex and OpenCode how to work on pinot-pi itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything pinot-pi configures →

not rated 11repo 3d ago A scan 182 tokens original MIT
View source ↗ jbstavers/pinot-pi
Reuse

Borrowing it

Nothing to install: this file belongs to jbstavers/pinot-pi. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/jbstavers/pinot-pi/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/jbstavers/pinot-pi

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for pinot-pi AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/jbstavers/pinot-pi/agents-md/github.svg)](https://agentmods.dev/instructions/jbstavers/pinot-pi/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/jbstavers/pinot-pi/agents-md"><img src="https://agentmods.dev/badge/instructions/jbstavers/pinot-pi/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for pinot-pi AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/jbstavers/pinot-pi/agents-md"><img src="https://agentmods.dev/badge/instructions/jbstavers/pinot-pi/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 182 This file is loaded in full into every session.
When invoked 182 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00182 $0.00182
Opus 5.5 $0.00073 $0.00073
Sonnet 5.5 $0.00036 $0.00036
Haiku 4.5 $0.00018 $0.00018

Measured 2mo ago against content hash 0a556f6027cd, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

pinot-pi AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 10 lines

What it actually says

Agent guidance

Pinot is an independent Pi coding-agent workflow package. Keep package code, templates, and tests public-safe and independent from any private configuration or repository.

  • Mutable user state belongs outside the checkout, under ~/.pinot-pi by default. The only Pinot state-root override is PINOT_STATE_DIR.
  • Loading extensions/pinot.ts must not write files or inspect credentials, settings, or session contents. Writes occur only through explicit /pinot-setup.
  • Use exact built-in inspection commands for load-bearing checks. Optional RTK use is reconnaissance only; never run rtk init or use an automatic rewrite hook.
  • Run focused tests with npm test and type checks with npm run typecheck. Keep noisy diagnostic output under ignored +test-output/.
  • Do not commit or add a remote unless the repository owner explicitly asks.
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 10 lines · 182 tokens per session scan A 0a556f6027cd

Subscribe to this mod's changes

pinot-pi AGENTS.md is an instructions file published in the GitHub repository jbstavers/pinot-pi (11 stars, last pushed 3d ago), licensed MIT. It adds 182 tokens to every session, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Building agents
Related

pinot-pi AGENTS.md compared with instructions from other repositories

pinot-pi AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
pinot-pi AGENTS.mdjbstavers/pinot-piInstructions file113d agoMITA182Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode