armory: Instructions file for Codex

AGENTS.md

armory AGENTS.md is an instructions file for Codex, OpenCode from Mathews-Tom/armory. It costs 535 tokens per session, scanned A, original, MIT.

Repository instructions for reviewing the Armory project’s agent packages, generated files, routing data, and CI checks. They define what counts as a real workflow or generator defect.

In plain words
What is it for?
They are for reviewing agent instructions, package descriptions, manifest and adapter generators, router indexes, and the limits of CI coverage.
Why use it?
They help reviewers report functional problems at their source instead of duplicating errors already caught by automated checks or raising style-only issues.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md.

This is Mathews-Tom/armory's own configuration. It tells Codex and OpenCode how to work on armory itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything armory configures →

Reuse

Borrowing it

Nothing to install: this file belongs to Mathews-Tom/armory. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/Mathews-Tom/armory/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/Mathews-Tom/armory

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for armory AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/mathews-tom/armory/agents-md/github.svg)](https://agentmods.dev/instructions/mathews-tom/armory/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/mathews-tom/armory/agents-md"><img src="https://agentmods.dev/badge/instructions/mathews-tom/armory/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for armory AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/mathews-tom/armory/agents-md"><img src="https://agentmods.dev/badge/instructions/mathews-tom/armory/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 535 This file is loaded in full into every session.
When invoked 535 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00535 $0.00535
Opus 5.5 $0.00214 $0.00214
Sonnet 5.5 $0.00107 $0.00107
Haiku 4.5 $0.00053 $0.00053

Measured 7d ago against content hash be9fecf87904, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

armory AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 16 lines

How it starts

The opening of the file, as written. The whole thing — 16 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Code Review Rules

  • Failure means package instructions in skills/*/SKILL.md, agents/*/AGENT.md, or commands/*/COMMAND.md contradict their bundled scripts/references and make the documented workflow fail or take an unauthorized action.
  • Failure means a package description routes a concrete request to the wrong package or excludes an intended invocation; demonstrate the conflicting trigger and workflow rather than guessing from a name.
  • Failure means scripts/generate_manifest.py, scripts/generate_adapters.py, or scripts/build_router_index.py drops or misrepresents package metadata, required supporting files, or history-derived routing evidence; identify the affected package/host/request.
  • Respect CI coverage: package.yml checks manifest drift and regenerates/validates adapters, but does not compare committed adapters for drift; router-index.yml rebuilds on main/schedule/manual dispatch, not as a PR synchronization gate. Report semantic generator defects or demonstrated adapter drift at their source, not duplicate manifest/frontmatter/reference/eval-schema gate errors.
  • Do not report style, formatting, naming nits, or diagnostics already enforced by Ruff, mypy --strict, ESLint, or tsc within their configured scopes in .github/workflows/tests.yml and extensions/package.json; speculative hardening is not a finding.
  • Review PR-introduced failures only. Tag unchanged-code issues Pre-existing without requesting a fix; do not repeat findings already raised on an earlier commit of the same PR unless the attempted fix introduces a distinct failure.
  • Paths to skip for line-by-line review: generated manifest.yaml and adapters/**; review canonical package definitions and generator logic instead. Generated-output comparisons may support a source-level finding.
  • Lockfiles (uv.lock, extensions/bun.lock) stay in scope for dependency changes: flag packages added or version-changed without a matching change in pyproject.toml or extensions/package.json; do not review them line by line.
  • Every finding must name file:line, the concrete failing scenario and consequence, and the bug class so the author can fix every instance; tag it Important, Nit, or Pre-existing. A suggestive identifier alone is not evidence.
  • Start the summary with the count of Important findings; when there are no actionable findings, say plainly: "Nothing to fix."
  • Keep completion criteria, templates, and eval rubrics conditional on the selected workflow branch: stop, rejection, zero-candidate, and small/no-plan paths must not require artifacts or continuation that their own instructions forbid.

Read the full file on GitHub · 16 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago First seen · 16 lines · 535 tokens per session scan A be9fecf87904

Subscribe to this mod's changes

armory AGENTS.md is an instructions file published in the GitHub repository Mathews-Tom/armory (340 stars, last pushed 6d ago), licensed MIT. It adds 535 tokens to every session, about $0.0021 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-31.

Related

armory AGENTS.md compared with instructions from other repositories

armory AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
armory AGENTS.mdMathews-Tom/armoryInstructions file3406d agoMITA535Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149ktodayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file275k2d agoMITA4,313Codex, OpenCode