Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/kingsword09/xling/agents-mdgit clone --depth 1 https://github.com/kingsword09/xlingWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/kingsword09/xling/agents-md)<a href="https://agentmods.dev/instructions/kingsword09/xling/agents-md"><img src="https://agentmods.dev/badge/instructions/kingsword09/xling/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.03157 | $0.03157 |
| Opus 5 | $0.01579 | $0.01579 |
| Sonnet 5 | $0.00631 | $0.00631 |
| Haiku 4.5 | $0.00316 | $0.00316 |
Grade D, and why
xling AGENTS.md scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
1. Install Bun (recommended: `curl -fsSL https://bun.sh/install | bash`). Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
- **Config files**: `~/.claude/settings.json`, `.claude/settings.json`, `.claude/settings.local.json` Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
1. Install Bun (recommended: `curl -fsSL https://bun.sh/install | bash`). How it starts
The opening of the file, as written. The whole thing — 297 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Project Conventions
- Runtime: Bun (>= 1.3.2). Run every development, build, and test script via
bun. - Language: Business logic lives in TypeScript. If a JavaScript helper is required, document the rationale.
- Build System: tsdown (powered by rolldown) compiles and bundles the CLI.
- Linting: oxlint provides fast, Rust-based lint and type checks (
--type-aware --type-checkenables full TypeScript type checking, replacingtsc --noEmit). - Formatting: oxfmt enforces the shared Prettier-compatible style.
- Testing: Vitest (invoked through
bun test) covers unit and integration flows. - CLI Framework: oclif powers subcommands, flag validation, and auto-generated help.
UI Stack
- Frontend: React 19 + React DOM 19; avoid legacy class components and keep hooks idiomatic to the current major.
- Build: Vite 7 with Tailwind CSS 4 builds
src/uiintodist/ui;bun run buildalready triggersbun run build:ui, or runbun run build:uidirectly when iterating on the frontend. - Dev Server:
bunx vite dev --config vite.config.ts --host --port 3000serves the React UI; keep the port in sync withdiscuss --ui(defaults to 3000). - Static Assets: The discuss server serves files from
dist/ui; rebuild after UI changes so the CLI can load the latest bundle.
Environment Setup
- Install Bun (recommended:
curl -fsSL https://bun.sh/install | bash). - Run
bun installat the repo root. - Compile the project with
bun run build. - Verify the CLI by running
./bin/run.js --help. - Run
bun lintandbun fmtto ensure lint/format success. - Run
bun testorbun test --watchto confirm the test suite.
Development Rules
- Declare new npm scripts inside
package.jsonand execute them withbun run <script>. - Keep TypeScript in strict mode and expose types for every public API.
- Ship Vitest coverage with each new feature (call out temporary gaps in the PR if needed).
- Follow SOLID: single responsibility, open/closed, Liskov substitution, interface segregation, dependency inversion.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 297 lines · 3,157 tokens per session scan D bd4b47754175
xling AGENTS.md is an instructions file published in the GitHub repository kingsword09/xling (2 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 3,157 tokens to every session, about $0.0158 per session on Opus 5. A static security scan graded it D with 3 findings (downloads and executes remote code, reads agent configuration directories, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
spec-kitty AGENTS.md
AGENTS.md instructions for Priivacy-ai/spec-kitty, covering spec kitty development guidelines, ⚠️ critical: load the project charter first, ⚠️ critical: template source location, ⚠️ critical: use canonical sources, never improvise and ⚠️ critical: git workflow — no direct pushes to origin/main.
coral CLAUDE.md
Instructions for cdknorow/coral, covering claude.md - coral go, mission, testing, go unit tests and legacy parity tools (historical reference).
sessionview AGENTS.md
AGENTS.md instructions for tyql688/sessionview, covering sessionview, commands, app / frontend, gates must pass under both feature sets: default (gui) and and --no-default-features --features headless.
SubFrame AGENTS.md
AGENTS.md instructions for Codename-11/SubFrame, covering subframe - subframe project, core working principle, relationship to native ai tools, session start and concurrent work & worktrees.
gemini-cli-desktop AGENTS.md
Instructions for Piebald-AI/gemini-cli-desktop, a project described as: Web/desktop UI for Gemini CLI/Qwen Code. Manage projects, switch between tools, search across past conversations, and manage MCP servers, all from one multilingual interface, locally or remotely.
hames CLAUDE.md
Claude Code instructions for baek-labs/hames, a project described as: Workspace-first orchestration for multi-model AI workflows. Frozen reference implementation.