EchoBot AGENTS.md

Python coding guidelines for an AI agent, written partly in Chinese. They emphasize readable code, clear responsibilities, standard-library use, and safe handling of asynchronous work.

In plain words
What is it for?
Writing or reviewing Python 3.11+ functions and modules, choosing file and JSON handling approaches, sharing core logic, and moving blocking work to background threads when needed.
Why use it?
They reduce confusing code and prevent slow file, network, or CPU-heavy tasks from blocking other asynchronous work.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/kdaip/echobot/agents-md
Clone the repo
git clone --depth 1 https://github.com/KdaiP/EchoBot

Made for: Codex, OpenCode.

Per session 406 This file is loaded in full into every session.
When invoked 406 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00406 $0.00406
Opus 5 $0.00203 $0.00203
Sonnet 5 $0.00081 $0.00081
Haiku 4.5 $0.00041 $0.00041

Measured 2d ago against content hash e3d58d42532b, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

EchoBot AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 33 lines

What it actually says

AGENTS.md

本代码库以简洁与可读性优先。 请编写 Python 初学者也能看懂、维护和扩展的代码。

原则 (Principles)

  1. 清晰至上 (Clarity first)

    • 编写简单、清晰、易于理解的代码。
    • 避免过早优化和不必要的抽象。
    • 遵循《Python 之禅》(The Zen of Python) 。
    • 目标版本为 Python 3.11+;避免使用已弃用的写法。
  2. 单一职责 (Single responsibility)

    • 每个函数/类/模块都应当只把 一件事 做好。
  3. 关注性能 (Performance-aware)

    • 在关键路径上对性能保持敏感。
    • 在异步代码中,绝不要因为磁盘/网络 I/O 或 CPU 密集型任务而阻塞事件循环

风格与规范 (Style & conventions)

  • 使用描述性的名称;避免使用晦涩难懂的单行代码。
  • 优先使用 pathlib 而非 os.path
  • 除非引入依赖项确实物超所值,否则优先使用标准库。
  • 使用 json.dump 或 json.dumps 时,必须设置 ensure_ascii=False,以确保输出内容支持中文原样显示,提高可读性。
  • 所有入口复用同一个 Core,而不是各做一套业务逻辑。

异步 (适用时)

  • 不要在 async def 中运行阻塞式 I/O 或 CPU 密集型任务。
  • 使用 asyncio.to_thread(...)(必要时使用 executor)将阻塞任务转移出去。
  • 在可能的情况下,保持异步 API 从端到端的一致性。
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 33 lines · 406 tokens per session scan A e3d58d42532b

Subscribe to this mod's changes

EchoBot AGENTS.md is an instructions file published in the GitHub repository KdaiP/EchoBot (628 stars, last pushed 16d ago), licensed MIT. It adds 406 tokens to every session, about $0.0020 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.