Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/lidge-jun/opencodex/agents-mdgit clone --depth 1 https://github.com/lidge-jun/opencodexWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.04317 | $0.04317 |
| Opus 5 | $0.02159 | $0.02159 |
| Sonnet 5 | $0.00863 | $0.00863 |
| Haiku 4.5 | $0.00432 | $0.00432 |
Grade C, and why
opencodex AGENTS.md scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://bun.sh/install | bash # installs ~/.bun/bin/bun Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://bun.sh/install | bash # installs ~/.bun/bin/bun How it starts
The opening of the file, as written. The whole thing — 344 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Guidance for AI agents (and humans) working on or reviewing this repository.
What this project is
opencodex (ocx) is a universal provider proxy for OpenAI Codex and Claude Code:
one local proxy that lets Codex CLI/App/SDK and Claude Code use many LLM
providers (Claude, Gemini, Grok, DeepSeek, Ollama, and more). The runtime is
Bun-native TypeScript with no separate server compile step.
Repository layout
src/— proxy runtime: routing, provider adapters, config, management API.tests/— flat Bun tests (tests/*.test.ts); shared fixtures intests/helpers/, broader scenarios intests/e2e-style/.gui/— React + Vite dashboard; packaged output is served fromgui/dist.docs-site/— public docs (Astro + Starlight), deployed to GitHub Pages.go/— retired Go native-runtime experiment; kept only where the TypeScript runtime still references it. New work does not go here.structure/— maintainer invariants and architecture notes; read before changing shared subsystems.scripts/— release and maintenance tooling;scripts/release.tsis the release authority.devlog/— planning and investigation notes, tracked in this repository. See "Thedevlogdirectory" below for what may and may not go there.
Read the nearest nested AGENTS.md before changing files in a scoped
directory (src/, gui/, docs-site/, scripts/, .github/).
Optional subsystems stay off the core path
src/lab/ (Compatibility Lab) is opt-in. A user who configures one provider and
one model — no routing profile, no Lab — must execute no Lab code and start no
Lab timer.
Three files carry every such user's request path and must not reach src/lab/,
directly or transitively:
src/router.tssrc/server/lifecycle.tssrc/server/responses/core.ts
tests/core-lab-boundary.test.ts enforces this by walking the runtime import
graph and printing the offending chain on failure. It is not a style rule: the
original violation hid in a six-hop chain
(assemble → quota → auth-api → native-main-admission → lifecycle → lab) where
no single file looked wrong, and it pulled ~69 Lab modules into every install.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 344 lines · 4,317 tokens per session scan C 208bb1792a7f
opencodex AGENTS.md is an instructions file published in the GitHub repository lidge-jun/opencodex (12,581 stars, last pushed yesterday), licensed MIT. It adds 4,317 tokens to every session, about $0.0216 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
langchain AGENTS.md
Instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
CLIProxyAPI AGENTS.md
Instructions for router-for-me/CLIProxyAPI, covering agents.md, repository, commands, config and architecture.
neo-chat AGENTS.md
Instructions for u14app/neo-chat, covering repository guidelines, project structure & module organization, build, test, and development commands, coding style & naming conventions and testing guidelines.
proxypal AGENTS.md
Instructions for heyhuynhgiabuu/proxypal, covering proxypal, stack, structure, commands and code style.
ima2-gen AGENTS.md
Instructions for lidge-jun/ima2-gen, covering ima2-gen — ai context, what this project does, tech stack, project structure and agent skills (packaged).
langchain CLAUDE.md
Instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.