Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/mabelisle/omni-cli/gemini-mdgit clone --depth 1 https://github.com/mabelisle/omni-cliWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00900 | $0.00900 |
| Opus 5 | $0.00450 | $0.00450 |
| Sonnet 5 | $0.00180 | $0.00180 |
| Haiku 4.5 | $0.00090 | $0.00090 |
Grade B, and why
omni-cli GEMINI.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
* **Security:** Never run as root effectively; use `entrypoint.sh` to drop privileges or run as the `omni` user. How it starts
The opening of the file, as written. The whole thing — 79 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Omni-CLI Context
Project Overview
Omni-CLI is a Dockerized, neural interface environment designed to unify access to various AI CLI tools (Gemini, Codex, Copilot, Aider). It provides a secure, sandboxed workspace that can be accessed via SSH or direct Docker attachment. The project is built on top of a lightweight Node.js image and includes custom shell scripts for project management and tool invocation.
Architecture & Core Components
Docker Structure
- Base Image:
node:25-slim(Debian-based). - Multi-Stage Build: Uses a
builderstage for installing global npm packages (@google/gemini-cli, etc.) to keep the final image clean. - User Management:
- The default
nodeuser (UID 1000) is removed in the final stage to avoid conflicts. - A custom
omniuser is created. - Runtime Mapping:
entrypoint.shdynamically updates theomniuser's UID/GID to match the host system (viaPUID/PGIDenv vars), ensuring correct file permissions for mounted volumes.
- The default
Key Scripts
entrypoint.sh: The container entrypoint. Handles:- User ID mapping (usermod/groupmod).
- SSH host key generation.
- Directory permission fixes.
- Starting
sshdor executing command arguments.
omni-cli.sh: The interactive "Neural Interface".- A generic
bashscript providing a menu-driven UI. - Manages projects in the
/datadirectory. - Wraps AI CLI tool execution.
- A generic
Building and Running
Build
docker build -t omni-cli .
Run (Development/Testing)
The container is designed to be persistent. It requires mapping volumes for data and configuration.
docker run -d \
--name omni-cli \
-p 2222:22 \
-v $(pwd)/omni-data:/data \
-v $(pwd)/omni-config:/config \
-e PUID=$(id -u) \
-e PGID=$(id -g) \
omni-cli
Access
- SSH:
ssh omni@localhost -p 2222(Password:changemeor as configured). - Interactive Shell: The
omni-climenu launches automatically upon login (configured in.profile).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 79 lines · 900 tokens per session scan B 4a5e1eadd343
omni-cli GEMINI.md is an instructions file published in the GitHub repository mabelisle/omni-cli (6 stars, last pushed 7mo ago), licensed Apache-2.0. It adds 900 tokens to every session, about $0.0045 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
docker-gemini-cli GEMINI.md
Instructions for naoyoshinori/docker-gemini-cli, covering 1. core functionality, 2. project structure and key files, 2.1. image variants, 2.2. automation and 3. documentation.
Project-AMBER AGENTS.md
Instructions for JJHbrams/Project-AMBER, covering agent orchestration, roles and non-negotiable rules.
Project-AMBER project-guides.instructions.md
Project coding guidelines, todo monitoring rules, and context for AI agents working on Project Engram.
generative-commit-message-for-ai-tool CLAUDE.md
Instructions for UNILORN/generative-commit-message-for-ai-tool, covering claude.md, project overview, build and development commands, architecture and core packages.
ai-cli-in-docker AGENTS.md
AGENTS.md instructions for vladborovtsov/ai-cli-in-docker, a project described as: Collection of AI CLI wrappers: Run AI CLI tools (OpenAI Codex, Google Gemini, OpenCode, Claude Code) inside Docker to keep your host clean while persisting CLI auth/config on your machine.
all-agents-mcp CLAUDE.md
Instructions for Dokkabei97/all-agents-mcp, covering claude.md, project overview, build & development commands, architecture and entry flow.