agentmods.dev

securetools copilot-instructions.md

Project instructions for SecureTools, a browser-based collection of tools that runs entirely on the user's device without a server or build system.

In plain words
What is it for?
Use them when adding or changing SecureTools pages, styles, scripts, tools, randomness, external scripts, or commit messages.
Why use it?
They set the coding and security constraints needed to keep the project framework-free, client-side, and consistent.

Instructions file for GitHub Copilot

2 3mo ago A scan 493 tokens original MIT
View the source file MidnightMarathon/securetools
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/midnightmarathon/securetools/copilot-instructions
Clone the repo
git clone --depth 1 https://github.com/MidnightMarathon/securetools

Made for: GitHub Copilot.

Per session 493 This file is loaded in full into every session.
When invoked 493 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00493 $0.00493
Opus 5 $0.00246 $0.00246
Sonnet 5 $0.00099 $0.00099
Haiku 4.5 $0.00049 $0.00049

Measured 2d ago against content hash d843c43b1a90, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

securetools copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/copilot-instructions.md · 48 lines

What it actually says

Copilot Instructions for SecureTools

Project Identity

SecureTools is a zero-tracking, zero-backend collection of browser tools. Everything runs client-side. The stack is vanilla HTML, CSS, and JavaScript — no frameworks, no build step, no npm.

Absolute Rules

  • No frameworks (React, Vue, jQuery, Tailwind, etc.)
  • No build tools (Webpack, Vite, etc.)
  • No package.json or node_modules
  • No server-side code or API calls with user input
  • No inline JavaScript in HTML — all JS in external .js files loaded with defer
  • No Math.random() — use crypto.getRandomValues() for any randomness
  • Every CDN <script> must have integrity (SRI hash) and crossorigin="anonymous"

Code Style

  • HTML: 2-space indent, semantic elements, lang="en", <label> for every <input>
  • CSS: shared styles in /assets/styles.css (absolute path). Brand blue: #2d9cdb
  • JS: 'use strict' on line 1. const/let only. addEventListener for all events. Small named functions.
  • Commits: Conventional Commits format — feat(scope):, fix(scope):, docs:, style(scope):

Adding a New Tool

  1. Copy tool-template/ to <tool-name>/ at repo root
  2. Replace all placeholders in index.html and script.js
  3. Link /assets/styles.css with an absolute path
  4. Set <script src="/<tool-name>/script.js" defer>
  5. Add a tile to index.html (home page)
  6. Add a row to the tools table in README.md

Every tool page has exactly:

<nav>
  <a href="/" aria-label="SecureTools Home">Home</a>
  <a href="/about.html" aria-label="About SecureTools">About</a>
</nav>

File References

  • Shared CSS: /assets/styles.css (always absolute)
  • Tool script: /<tool-name>/script.js (always absolute, always defer)
  • See AGENTS.md for the full specification
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 48 lines · 493 tokens per session scan A d843c43b1a90

Subscribe to this mod's changes

securetools copilot-instructions.md is an instructions file published in the GitHub repository MidnightMarathon/securetools (2 stars, last pushed 3mo ago), licensed MIT. It adds 493 tokens to every session, about $0.0025 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Browser automationGit and workflow
Related

Other instructions, from other repositories

Browser4 CLAUDE.md

Instructions for platonai/Browser4, covering browser4 — project context for claude, architecture, key dispatch chain (cli → browser), batch commands and e2e test structure.

platonai/Browser4 · 1,205 tokens

agentic-playwright selectors.instructions.md

Instructions for idavidov13/agentic-playwright, covering selector strategy, critical, instructions, phase 1: open and authenticate and phase 2: explore like a user.

idavidov13/agentic-playwright · 2,174 tokens

scrapai-cli CLAUDE.md

Instructions for discourselab/scrapai-cli, covering claude.md, 1. who you are, 2. hard rules, 3. tools and 4. before you start: confirm the project.

discourselab/scrapai-cli · 8,964 tokens

chromeboost CLAUDE.md

Instructions for lordamdal/chromeboost, covering chromeboost — repo-developer guide, what chromeboost is, repository layout, development commands and tests/antibot/ (run locally; not in ci).

lordamdal/chromeboost · 3,633 tokens

xgrower-extension CLAUDE.md

Instructions for JoyyyceD/xgrower-extension, covering x grower extension — architecture notes, architecture, key files, auth flow and quota system.

JoyyyceD/xgrower-extension · 900 tokens

fast-browser CLAUDE.md

Claude Code instructions for m4ttstack/fast-browser, covering fast browser plugin, where a change belongs, fork branch: use fast-browser-runtime, releasing a new runtime and re-pinning this repo: use the script.

m4ttstack/fast-browser · 1,446 tokens