Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/liustack/vibemaster/agents-mdgit clone --depth 1 https://github.com/liustack/vibemasterWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00948 | $0.00948 |
| Opus 5 | $0.00474 | $0.00474 |
| Sonnet 5 | $0.00190 | $0.00190 |
| Haiku 4.5 | $0.00095 | $0.00095 |
Grade A, and why
vibemaster AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 44 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Project Overview
This repository (liustack/vibemaster) has three overlapping identities:
- GitHub profile repository —
README.md(andREADME.zh-CN.md) render on the GitHub profile page at github.com/liustack. Keep it concise and professional. - The vibemaster skill stack —
skills/is the product core: a four-skill work loop (shaping unformed intent into specs and designs, coding discipline from plan through review, root-cause digging, task-state snapshots) distributed through multiple plugin marketplaces (Claude Code plugin marketplace, Codex~/.agents/skills, skills.sh, etc.). - Shared resources hub —
scripts/,docs/, andrules/collect reusable scripts, docs, and agent rules shared across all repositories.
Directory Structure
README.md # GitHub profile page content
scripts/ # Shared utility scripts used across repos
skills/ # The vibemaster skill stack (product core)
docs/philosophy.md # Design principles — read before designing or revising any skill
docs/ # Shared documentation and references
rules/ # Reusable agent rules — drop-ins for .claude/rules/, paste-able into AGENTS.md (see rules/README.md)
Docs Discovery
Before starting work, run:
bash scripts/list-docs.sh
It lists every doc under docs/ and rules/ with its summary and "Read when" hints. Check the hints and read the relevant docs before coding.
Conventions
README.mdis public-facing. Write in English, keep it clean and professional.scripts/contains cross-repo utility scripts (e.g., automation, data fetching).skills/follows the standard skill format: each skill is a directory with aSKILL.mdand optionalreferences/folder.- Skill
descriptionfields must be lean and keyword-first: harnesses inject every installed skill's description into context (Claude Code caps the whole listing at ~1% of the context window and truncates long entries), so the opening clause must carry the trigger keywords. - Triggering discipline for descriptions: state what the skill is + when to use + how it differs from neighboring skills, add an explicit exclusion clause ("Do not trigger for…") when the positive triggers are broad, never use moral imperatives (MUST/ALWAYS — they cause both over- and under-triggering), and one trigger per branch (do not restate the same scenario in synonyms — it wastes the listing budget).
- Invocation control for all skills: none. The description wording is the first guard.
shapinghas a broad surface: product and feature definition may trigger from ordinary wording, while life and career decisions are out of scope entirely (its description excludes them, and personal judgment lives in opcstack'sopc-founder). Because a mistaken load can turn into unwanted questioning, its body starts with a silent gate. A clear mismatch completes the original request without announcing the gate, asking a diagnostic question, or creating a file. - Testing layout: deterministic code tests (for scripts/) go in
tests/once such code exists. Model-behavior evals live in repo-levelevals/<skill-name>/(author-side, official skill-creator schema) — never insideskills/, so installs stay clean. Runscripts/check-skills.shandscripts/check-contract.shbefore committing skill or manifest changes. - Language regime: skill bodies, references, and docs are written in English (the authoritative version) with a
.zh-CN.mdtranslation alongside. Skill descriptions are English-framed: the capability sentence and the exclusion clause are written once, in English, and Chinese appears only as trigger words a user would actually type. They are the trigger surface, not a translated document, so restating the same sentence in both languages buys no extra coverage and spends a listing budget capped at ~1% of the context window. Cross-references and the docs index point at English files only, and authoritative files carry no language links (translations link back to them). - Working drafts (designs, plans, ideation output, diagnosis logs, research notes) go in
.issues/<YYYY-MM-DD-topic>/(gitignored via.git/info/exclude), organized by task, not by type. - When adding new shared resources, place them in the appropriate directory and keep naming consistent.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 44 lines · 948 tokens per session scan A 303ea8c71391
vibemaster AGENTS.md is an instructions file published in the GitHub repository liustack/vibemaster (10 stars, last pushed 19d ago), licensed MIT. It adds 948 tokens to every session, about $0.0047 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
next.js AGENTS.md
Instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.