Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/m4f-s/gomaa/agents-mdgit clone --depth 1 https://github.com/M4F-S/gomaaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/m4f-s/gomaa/agents-md)<a href="https://agentmods.dev/instructions/m4f-s/gomaa/agents-md"><img src="https://agentmods.dev/badge/instructions/m4f-s/gomaa/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01880 | $0.01880 |
| Opus 5 | $0.00940 | $0.00940 |
| Sonnet 5 | $0.00376 | $0.00376 |
| Haiku 4.5 | $0.00188 | $0.00188 |
Grade C, and why
gomaa AGENTS.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
| **Local SSH Key** | Configure your own in `~/.ssh/` (e.g. `~/.ssh/id_ed25519`) | Copies of this mod
1 near-identical copy found in the catalogue:
- comis AGENTS.md — 86% identical, 463 lines differ
How it starts
The opening of the file, as written. The whole thing — 133 lines — stays where its author put it; the contents beside it link to each section on GitHub.
🧠 Gomaa Autonomous Agent Ecosystem & VPS Operations Guide
Notice for all AI Coding Assistants (Antigravity, Cursor, Claude Code, Codex, Windsurf): This repository is the source code and orchestration center for Gomaa v3.5.0 and the 5-agent Hermes fleet deployed on a production VPS. Use this document as your primary reference for deployment architecture, database topologies, and operational commands. All live hostnames, IPs, and credentials must be supplied via environment variables — never committed.
🎯 Agent Operational Directives & Execution Protocol
Role & Objective
Act as an expert researcher and strategic executioner. Your goal is to complete the task with absolute accuracy and zero assumptions.
Core Rules
- Verify Everything: Never assume facts, syntax, or outcomes. Treat every data point as unverified until proven otherwise.
- Research Deeply: Conduct thorough research. Use only reliable, high-quality resources (official documentation, academic papers, or trusted industry standards).
- Test Continuously: Run tests at every critical stage. Verify that code, logic, or data works in practice, not just in theory.
Execution Protocol
- Research & Plan: Investigate the problem deeply. Formulate a structured, step-by-step execution plan based on your findings.
- Skeptical Review: Before executing, pause and review your own plan with a critical, skeptical eye. Identify potential edge cases, hidden flaws, or weak assumptions.
- Execute & Test: Implement the plan incrementally, testing your output at each step to ensure accuracy.
- Git Workflow: Work strictly within a Git repository. Always push your committed changes to GitHub, and explicitly tag stable versions to maintain a reliable deployment history.
🌐 Production VPS Infrastructure
| Resource | Value / Configuration |
|---|---|
| VPS IP Address | `${VPS_HOST}` |
| SSH User | `${VPS_USER:-root}` |
| Direct SSH Command | `ssh -o ConnectTimeout=10 -o BatchMode=yes ${VPS_USER:-root}@${VPS_HOST}` |
| SSH Aliases | ssh ai-club-vps or ssh my-vps (add your own in ~/.ssh/config) |
| Local SSH Key | Configure your own in ~/.ssh/ (e.g. ~/.ssh/id_ed25519) |
| PostgreSQL Internal IP | `${DB_HOST}:${DB_PORT}` (Docker network) |
| Database Credentials | User: `${DB_USER}`, Password: `${DB_PASSWORD}` |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +18 lines · +261 tokens per session scan B → C 167c8a507320
- 5d ago First seen · 115 lines · 1,619 tokens per session scan B 8b384bb13ed5
gomaa AGENTS.md is an instructions file published in the GitHub repository M4F-S/gomaa (30 stars, last pushed 3d ago), licensed Apache-2.0. It adds 1,880 tokens to every session, about $0.0094 per session on Opus 5. A static security scan graded it C with 1 finding (reaches for credential files). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
memex AGENTS.md
Instructions for iamtouchskyer/memex, covering memex — agent working instructions, what is this, before you touch anything, how the code is layered and files you'll actually need.
rembric CLAUDE.md
Claude Code instructions for susomejias/rembric, covering claude.md, quick reference, claims need evidence, architecture and data access pattern.
brain-os AGENTS.md
Instructions for brainOS-HQ/brain-os, covering agents.md, context, the hard rule, tool routing (in order) and mutation safety.
gnosys AGENTS.md
AGENTS.md instructions for proticom/gnosys, covering agents.md, what is gnosys, quick reference, architecture and key rules.
brain-os copilot-instructions.md
Instructions for brainOS-HQ/brain-os, covering github copilot instructions, read this first, critical rules (also in agents.md) and known bugs (v0.4.1 fixes pending).
superlocalmemory AGENTS.md
AGENTS.md instructions for qualixar/superlocalmemory, covering gitnexus — code intelligence, always do, never do, resources and cli.