zotkit AGENTS.md

A set of instructions for AI agents that manage Zotero libraries with zotkit. Zotero is a reference manager, and zotkit can access it through its online API without the Zotero desktop app.

In plain words
What is it for?
Installing and configuring zotkit, checking its setup, and managing a user’s Zotero library while avoiding exposure of credentials.
Why use it?
It gives agents a defined installation and setup process, including how to handle API keys and optional WebDAV file storage safely.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/oldantique/zotkit/agents-md
Clone the repo
git clone --depth 1 https://github.com/oldantique/zotkit

Made for: Codex, OpenCode.

Per session 1,217 This file is loaded in full into every session.
When invoked 1,217 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01217 $0.01217
Opus 5 $0.00609 $0.00609
Sonnet 5 $0.00243 $0.00243
Haiku 4.5 $0.00122 $0.00122

Measured 3d ago against content hash e0e6604474c4, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

zotkit AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 89 lines

How it starts

The opening of the file, as written. The whole thing — 89 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Instructions for AI agents

You (an AI agent) were likely given this repo because your user wants you to manage their Zotero library with zotkit. Here is exactly how to proceed. (Developing zotkit itself instead? Read CLAUDE.md, not this file.)

1. Install

pipx install zotkit    # or: uv tool install zotkit / pip install zotkit

Requires Python 3.11+. Works on macOS, Windows, Linux — no Zotero desktop app needed.

2. Configure (interactive — involve the user)

Create the credentials file from .env.example at ./.env, ~/.config/zotkit/env, or $ZOTKIT_ENV:

  • Ask the user to create an API key (with write access) at https://www.zotero.org/settings/keys and tell you the key + the numeric userID shown on that page.
  • If they sync attachment files via WebDAV, ask them to open the Zotero desktop app → Settings → Sync → File Syncing and read you the WebDAV URL/username/password; append /zotero/ to the URL. (If they use Zotero Storage, skip the WEBDAV_* lines entirely — attach/fetch automatically use Zotero Storage instead.)
  • Never print, cat, echo, or commit the .env or any credential.

After writing the .env, run zotkit doctor — it validates config, API access, and attachment storage, and says what to fix. Don't proceed until it prints "all good".

Optionally set up tag conventions from conventions.example.toml — do this WITH the user; read docs/organizing-with-agents.md first for the design principles (shallow single-axis collections, namespaced facet tags).

If the user asks you to clean up or reorganize their library — whether it's a mess or already organized — docs/organizing-with-agents.md is the complete playbook: design principles, the backup → read-only proposals → reviewed serial writes loop, and the audit checklist for second passes.

3. Operate

Full task recipes live in skills/zotkit/SKILL.md — if your harness supports skills, install it (cp -r skills/zotkit ~/.claude/skills/); otherwise just read it. Quick reference:

Read the full file on GitHub · 89 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 89 lines · 1,217 tokens per session scan A e0e6604474c4

Subscribe to this mod's changes

zotkit AGENTS.md is an instructions file published in the GitHub repository oldantique/zotkit (23 stars, last pushed 17d ago), licensed MIT. It adds 1,217 tokens to every session, about $0.0061 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.