Borrowing it
Nothing to install: this file belongs to Knuckles-Team/ciso-assistant-api. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Knuckles-Team/ciso-assistant-api/main/AGENTS.mdgit clone --depth 1 https://github.com/Knuckles-Team/ciso-assistant-apiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/knuckles-team/ciso-assistant-api/agents-md)<a href="https://agentmods.dev/instructions/knuckles-team/ciso-assistant-api/agents-md"><img src="https://agentmods.dev/badge/instructions/knuckles-team/ciso-assistant-api/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/knuckles-team/ciso-assistant-api/agents-md"><img src="https://agentmods.dev/badge/instructions/knuckles-team/ciso-assistant-api/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.02558 | $0.02558 |
| Opus 5.5 | $0.01023 | $0.01023 |
| Sonnet 5.5 | $0.00512 | $0.00512 |
| Haiku 4.5 | $0.00256 | $0.00256 |
Grade A, and why
ciso-assistant-api AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 201 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Agent contract
Tool-neutral rules for any AI agent or human working in this repository. This block is maintained by the fleet standard; edit outside the markers.
- Owner boundary: this repository owns one external system's calls, mappings and MCP tools (spec prefix
CONN-CISO-ASSISTANT-API-); it depends on the connector SDK only. Feature routing across repositories: ecosystem boundaries. - Setup: run
scripts/bootstrap.sh. It is idempotent and non-interactive: it pins uv and Python, syncs the locked environment, installs the git hooks and prints the gate command. - Gates:
uvx pre-commit run --all-filesmust pass before you push. Do not bypass hooks to get green. - Commits: one logical change per commit with a
Spec: <ID>trailer (orSpec: none (<reason>)), plus aCo-Authored-By:trailer naming the assisting agent. Stage explicit paths only; nevergit add -Aorgit add .. Use your own configured Git identity, never a tool or bot name. - Org rules: organization AGENTS.md.
Canonical guidance for any AI coding agent or human; tool-specific entry files (for example
CLAUDE.md) only import this file. Edit this file.
CISO Assistant-Specific Notes (READ FIRST)
This package achieves 100% CISO Assistant API coverage by code generation, not by
hand. The single source of truth is the vendored OpenAPI specs under
ciso_assistant_api/specs/*.json.
- Do not hand-edit generated files. These are emitted by
scripts/generate_from_openapi.pyand will be overwritten:ciso_assistant_api/api/api_client_<domain>.py,ciso_assistant_api/api_client.py,ciso_assistant_api/api/_operation_manifest.py,ciso_assistant_api/mcp/mcp_<domain>.py, andciso_assistant_api/mcp/__init__.py. Change the generator instead, then re-run it andruff format .. - Hand-authored core (safe to edit):
ciso_assistant_api/api/api_client_base.py(auth, pagination, retry, URL resolution),ciso_assistant_api/auth.py,ciso_assistant_api/ciso_assistant_models.py,ciso_assistant_api/mcp/mcp_custom_api.py. - Refresh flow when CISO Assistant changes a spec: re-download specs →
python scripts/generate_from_openapi.py→ruff format .→pytest(the coverage keystone intests/test_ciso_assistant_coverage.pyproves spec operations == client methods == MCP actions).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · -2 tokens per session efa06b7986de
- 6d ago Changed · -9 tokens per session fc4af4aa03f4
- 14d ago Changed · +12 lines · +286 tokens per session 7588c7905869
- 19d ago Changed · -34 lines · -253 tokens per session 26da3dd7509a
- 26d ago Changed · +4 lines · +153 tokens per session 24cfcbbf4c9e
- 29d ago Changed · +1 tokens per session c713d429d441
- 2mo ago First seen · 219 lines · 2,382 tokens per session scan A 35e880590eac
ciso-assistant-api AGENTS.md is an instructions file published in the GitHub repository Knuckles-Team/ciso-assistant-api (0 stars, last pushed yesterday), licensed MIT. It adds 2,558 tokens to every session, about $0.0102 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
ciso-assistant-api AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| ciso-assistant-api AGENTS.mdKnuckles-Team/ciso-assistant-api | Instructions file | 0 | yesterday | MIT | A | 2,558 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | yesterday | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |