Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/kilo-org/kilocode/agents-mdgit clone --depth 1 https://github.com/Kilo-Org/kilocodeWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.04334 | $0.04334 |
| Opus 5 | $0.02167 | $0.02167 |
| Sonnet 5 | $0.00867 | $0.00867 |
| Haiku 4.5 | $0.00433 | $0.00433 |
Grade A, and why
kilocode AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **Backend/SDK programmatic testing**: see [TESTING.md](./TESTING.md) for spawning the local main-branch backend (`bun dev serve`) and driving it via `curl` — use this instead of `kilo serve` (prod binary) when testing How it starts
The opening of the file, as written. The whole thing — 215 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Kilo CLI is an open source AI coding agent that generates code from natural language, automates tasks, and supports 500+ AI models.
- ALWAYS USE PARALLEL TOOLS WHEN APPLICABLE.
- The default branch in this repo is
main. - Prefer automation: execute requested actions without confirmation unless blocked by missing info or safety/irreversibility.
- You may be running in a git worktree. All changes must be made in your current working directory — never modify files in the main repo checkout.
Build and Dev
- Dev:
bun run dev(runs from root) orbun run --cwd packages/opencode --conditions=browser src/index.ts - Dev with params:
bun dev -- help - Extension:
bun run extension(build + launch VS Code with the extension in dev mode). Pass--no-buildto skip the build. When asked to run an isolated VS Code/Kilo environment, use the CLI scripts instead of interactive launch configs:bun run extension:isolatedreuses.kilo-dev/, andbun run extension:isolated:cleanclears.kilo-dev/first. Pass an optional workspace path after--, for examplebun run extension:isolated -- ../sample-project. - Typecheck:
bun turbo typecheck(usestsgo, nottsc). Includes the JetBrains plugin and requires Java 21; do not runjava -versionas a routine preflight. Only check Java when a Gradle/Java command fails with a Java-version or missing-Java error. If missing, install via SDKMAN:sdk install java 21-tem && sdk use java 21-tem. If SDKMAN is not installed, see https://sdkman.io/install. - Test:
bun testfrompackages/opencode/(NOT from root -- root blocks tests) - Single test:
bun test ./test/tool/tool-define.test.tsfrompackages/opencode/ - CLI build artifact size check: after
bun run script/build.ts --single --skip-installinpackages/opencode/, usedu -h dist/*/*/bin/kilo(scoped package output lives underdist/@kilocode/) - SDK regen: After changing server endpoints in
packages/opencode/src/server/, run./script/generate.tsfrom root to regeneratepackages/sdk/js/ - Knip (unused exports):
bun run knipfrompackages/kilo-vscode/. CI runs this — all exported types/functions must be imported somewhere. Remove or unexport unused exports before pushing. - Source links: After adding or changing URLs in
packages/kilo-vscode/,packages/kilo-vscode/webview-ui/, orpackages/opencode/src/, runbun run script/extract-source-links.tsfrom the repo root and commit the updatedpackages/kilo-docs/source-links.md. CI runs this check — the build fails if the file is stale. - kilocode_change check:
bun run check-kilocode-changefrompackages/kilo-vscode/. CI runs this —kilocode_changeis a marker for upstream merge conflicts and must not appear inpackages/kilo-vscode/orpackages/kilo-ui/(these are entirely Kilo Code additions). Remove the markers before pushing. - opencode annotation check:
bun run script/check-opencode-annotations.ts --worktreefrom repo root when verifying local agent changes. CI runsbun run script/check-opencode-annotations.tson PRs touchingpackages/opencode/— every Kilo-specific change in shared opencode files must be annotated withkilocode_changemarkers. Exempt paths (no markers needed):packages/opencode/src/kilocode/,packages/opencode/test/kilocode/, and any path containingkilocodein the name. - Effect facade ratchet: Do not add runtime-backed Promise facades to shared
packages/opencode/srcEffect services; use service dependencies,AppRuntime, or Kilo-owned boundaries. Runbun run script/check-opencode-promise-facades.tswhen touching service adapters. - workflow allowlist:
bun run script/check-workflows.tsfrom repo root. CI runs this as part of the annotations workflow — any.yml/.yamlfile added to or removed from.github/workflows/must be reflected in the hardcoded list inscript/check-workflows.ts. Prevents upstream-merged workflows from silently starting to run in our CI. - Backend/SDK programmatic testing: see TESTING.md for spawning the local main-branch backend (
bun dev serve) and driving it viacurl— use this instead ofkilo serve(prod binary) when testing backend fixes.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +1 lines · +41 tokens per session 51a3746a7cdd
- 3d ago First seen · 214 lines · 4,293 tokens per session scan A fc30b06e84ca
kilocode AGENTS.md is an instructions file published in the GitHub repository Kilo-Org/kilocode (27,119 stars, last pushed today), licensed MIT. It adds 4,334 tokens to every session, about $0.0217 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
quick-ai CLAUDE.md
Instructions for wangjs-jacky/quick-ai, covering claude.md - quick ai 项目, 发布流程, 发布前必须完成, 发布命令 and 1. 更新 package.json 版本号.
awesome-vscode CLAUDE.md
Instructions for viatsko/awesome-vscode, covering claude.md, what this repo is, adding an entry, themes and linting / ci.
vscode-peacock AGENTS.md
Instructions for johnpapa/vscode-peacock, covering peacock — agent guide, project overview, repository structure, tech stack and build & run.
language-tools AGENTS.md
Instructions for prisma/language-tools, covering agent guide for prisma language tools, project overview, packages, documentation and quick start.
getspecstory copilot-instructions.md
Instructions for specstoryai/getspecstory: Examine the file changes for the pull request.
vscode-peacock copilot-instructions.md
Instructions for johnpapa/vscode-peacock, covering copilot instructions — peacock, project type, typescript conventions, vs code extension patterns and color handling.