Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/nikships/droidproxy/agents-mdgit clone --depth 1 https://github.com/nikships/droidproxyWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.03793 | $0.03793 |
| Opus 5 | $0.01896 | $0.01896 |
| Sonnet 5 | $0.00759 | $0.00759 |
| Haiku 4.5 | $0.00379 | $0.00379 |
Grade A, and why
droidproxy AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Build & Run
The Swift package lives in src/. Run all swift build, swift run, and swift package commands from there, not from the repo root.
# Preferred dev loop: kill any running DroidProxy, rebuild the .app bundle, and
# launch the freshly signed build. Use this instead of running create-app-bundle.sh
# + open by hand — it guarantees the old menu-bar process and bundled
# cli-proxy-api are stopped before the new app starts.
./dev-relaunch.sh
# Debug build (no .app bundle, no relaunch)
cd src && swift build
# Run the app manually (menu bar app — swift run does not work for LSUIElement apps)
# Build the .app bundle first, then open it:
./create-app-bundle.sh && open DroidProxy.app
# Release .app bundle at repo root
# Picks up CODESIGN_IDENTITY / APP_VERSION / TARGET_ARCH from env when present
./create-app-bundle.sh
dev-relaunch.sh is the preferred way to run DroidProxy during development. It calls create-app-bundle.sh (which runs swift build -c release and assembles the signed .app) after killing any running CLIProxyMenuBar / cli-proxy-api processes, then launches the fresh bundle. Do not use it for releases — those go through .github/workflows/release.yml.
create-app-bundle.sh currently builds DroidProxy.app at the repo root and bundles resources from src/Sources/Resources/.
Notarization (local)
ditto -c -k --sequesterRsrc --keepParent "DroidProxy.app" "DroidProxy-notarize.zip"
xcrun notarytool submit "DroidProxy-notarize.zip" --keychain-profile "notarytool" --wait
xcrun stapler staple "DroidProxy.app"
Sparkle update signing
src/.build/artifacts/sparkle/Sparkle/bin/sign_update DroidProxy-arm64.zip
Source Of Truth
The compiled app code is under src/. Treat src/Sources/**, src/Info.plist, and create-app-bundle.sh as source of truth. There is no longer a mirrored top-level resources/ tree — older AGENTS notes about it are stale.
Architecture
DroidProxy is a macOS menu bar app (LSUIElement) with:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 161 lines · 3,793 tokens per session scan A d92e0c42db37
droidproxy AGENTS.md is an instructions file published in the GitHub repository nikships/droidproxy (120 stars, last pushed 3d ago), licensed MIT. It adds 3,793 tokens to every session, about $0.0190 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
codex-token-meter AGENTS.md
Instructions for prefect12/codex-token-meter, covering ai token meter development guide, project shape, build and verification, git workflow and ai token meter test loop.
the-bridge CLAUDE.md
Claude Code instructions for KUP-IP/the-bridge, covering project: the bridge (thebridge), architecture, dev commands, key constraints and historical sprint — data-source registry (v3.8.1).
the-bridge AGENTS.md
AGENTS.md instructions for KUP-IP/the-bridge, covering agents.md, project overview, commands, build and debug build (fast iteration).
Applite CLAUDE.md
Instructions for milanvarady/Applite, covering claude.md, project overview, build & run, architecture and data flow.
wispterm AGENTS.md
Instructions for xuzhougeng/wispterm, covering agents.md, architecture, ui presentation styles, cohesion and coupling and integration layer vs feature domains.
HomeClaw AGENTS.md
Instructions for omarshahine/HomeClaw, covering homeclaw, architecture, project structure, build system and xcode version.