auto-mobile AGENTS.md

Project instructions for AutoMobile, a TypeScript server that automates Android and iOS devices through tools. It also includes supporting Kotlin and Swift code for the two mobile platforms.

In plain words
What is it for?
Use them when changing the device-automation server or its Android and iOS support code. They also explain how to write issue references and where to save terminal output.
Why use it?
They keep changes in the correct language and location, preserve the project's communication conventions, and require validation after implementation work.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/kaeawc/auto-mobile/agents-md
Clone the repo
git clone --depth 1 https://github.com/kaeawc/auto-mobile

Made for: Codex, OpenCode.

Per session 2,830 This file is loaded in full into every session.
When invoked 2,830 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02830 $0.02830
Opus 5 $0.01415 $0.01415
Sonnet 5 $0.00566 $0.00566
Haiku 4.5 $0.00283 $0.00283

Measured 3d ago against content hash d80763b574b8, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

auto-mobile AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 194 lines

How it starts

The opening of the file, as written. The whole thing — 194 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AutoMobile

Bun TypeScript MCP server providing Android & iOS device automation capabilities through its tools and resources. Kotlin & Swift supporting libraries and apps in android/ and ios/ respectively.

Key Rules

  • TypeScript only (no JavaScript)
  • Write GitHub issue and pull request references as clickable Markdown links only in AI-authored prose a human reads directly — issue and PR bodies, review comments, commit messages, and assistant chat responses — where a clickable link genuinely aids navigation for the reader. Do NOT require links in checked-in repository content: neither source code comments (bare #NNNN is the established convention — 625 references in src/, zero linked) nor Markdown documentation files (under docs/ and elsewhere), where bare #NNNN is likewise fine. Forcing explicit links into committed files renders as noise in an editor and makes the touched file the only inconsistent one. Automated reviewers (e.g. Codex) must NOT flag bare #NNNN references that appear in source-code comments or Markdown files; treat those as compliant.
  • After implementation changes, run relevant validation commands
  • Write terminal output to scratch/ when not visible
  • Local validation scripts live under scripts/ and should almost always be written in bash with shellcheck validation
  • Before adding a helper, parser, or dependency, search src/, scripts/lib/, package.json, and the runtime standard library. Prefer the standard library, then an existing direct dependency, then an existing repository helper, then a small tested helper. Do not parse JSON, YAML, XML, or TypeScript with line regexes when a structured parser or typed module contract exists. For new packages, state which built-in and installed alternatives were checked. Preserve injected interfaces/FakeTimer seams where tests need deterministic control.
  • Always use interfaces & fakes & FakeTimer to decouple implementations and keep tests extremely fast and non-flaky
  • Unit tests should pass in 100ms or less. Do not assume that a failing test can be allowed to fail.
  • For Swift, prefer an existing standard-library or Foundation API before adding an extension, helper, or package. Use URLComponents plus URLQueryItem for query values and Codable for AutoMobile-owned stable schemas. Keep JSONSerialization only at documented dynamic/bridge boundaries. A convenience dependency requires a stated platform-API gap, deployment-target check, and tests using interfaces/fakes.
  • For TypeScript changes, prefer the JavaScript/Node standard library, then an existing AutoMobile seam, before adding a local generic helper or direct dependency. Keep time, randomness, I/O, concurrency, and process access injectable when tests need control; justify any new direct dependency in docs/decisions/.
  • For Kotlin changes, check the Kotlin stdlib, JDK/AndroidX, the module's existing dependencies, and dependency-compatible AutoMobile modules before adding a helper, wrapper, *Util file, or dependency. Prefer the narrowest existing solution; keep one-off helpers private and adjacent to their consumer. Extract shared code only for two or more real consumers, and state any intentional exception (semantics, performance, API level, compatibility, testability, or readability) in the PR summary.

Read the full file on GitHub · 194 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 194 lines · 2,830 tokens per session scan A d80763b574b8

Subscribe to this mod's changes

auto-mobile AGENTS.md is an instructions file published in the GitHub repository kaeawc/auto-mobile (45 stars, last pushed 3d ago), licensed Apache-2.0. It adds 2,830 tokens to every session, about $0.0141 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.