Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/openonion/connectonion/agents-mdgit clone --depth 1 https://github.com/openonion/connectonionWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.05173 | $0.05173 |
| Opus 5 | $0.02586 | $0.02586 |
| Sonnet 5 | $0.01035 | $0.01035 |
| Haiku 4.5 | $0.00517 | $0.00517 |
Grade A, and why
connectonion AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 480 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
This file provides guidance to Codex (Codex.ai/code) when working with code in this repository.
Project Overview
ConnectOnion is a Python framework for creating AI agents with automatic activity logging, interactive debugging, and multi-agent collaboration. Philosophy: "Keep simple things simple, make complicated things possible" - simple 2-line agent creation, but production-ready with trust verification, event system, and plugin architecture.
Architecture
Core Components
- Agent (
connectonion/agent.py:29): Main orchestrator with LLM integration, tool execution, event system, and trust verification - LLM (
connectonion/llm.py:11): Unified abstraction supporting OpenAI, Anthropic, Gemini, and managed keys via factory pattern - Tool Executor (
connectonion/tool_executor.py:24): Executes tools with xray context injection, timing, error handling, and trace recording - Tool Factory (
connectonion/tool_factory.py): Converts Python functions to OpenAI-compatible tool schemas automatically - Logger (
connectonion/logger.py): Unified logging facade (terminal + plain text + YAML sessions) withquietandlogparameters - Console (
connectonion/console.py): Low-level terminal output with Rich formatting (used internally by Logger) - Events (
connectonion/events.py:11): Lifecycle hooks (after_user_input, before_llm, after_llm, before_each_tool, before_tools, after_each_tool, after_tools, on_error, on_complete, on_stop_signal) - Trust System (
connectonion/network/trust/): Three-level verification (open/careful/strict) with custom policy support - XRay Debug (
connectonion/xray.py:32): Runtime context injection for interactive debugging with@xraydecorator
Key Design Patterns
Tool System
- Function-based (recommended): Regular Python functions auto-convert to tools via type hints and docstrings
- Class-based (legacy): Inherit from
Toolbase class with explicit schemas - Auto-conversion:
create_tool_from_function()inspects signatures and generates OpenAI schemas
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 480 lines · 5,173 tokens per session scan A 2387a8d7589b
connectonion AGENTS.md is an instructions file published in the GitHub repository openonion/connectonion (1,480 stars, last pushed yesterday), licensed Apache-2.0. It adds 5,173 tokens to every session, about $0.0259 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
mini-swe-agent copilot-instructions.md
Copilot instructions for SWE-agent/mini-swe-agent, covering style guide, test style, bad and good.
ii-agent AGENTS.md
Instructions for Intelligent-Internet/ii-agent, covering ii-agent contributor guide, quick start, repository map, mandatory rules and architecture.
intelligent-terminal rust.instructions.md
Concise Rust coding conventions for this repository.
thinkrail AGENTS.md
Instructions for JetBrains/thinkrail, covering thinkrail, module structure & boundaries (top-priority requirement), engine: pi only, in-process, architecture (three rings) and repo layout.
sortie copilot-instructions.md
Instructions for sortie-ai/sortie, covering sortie coding & review standards, 1. layered imports (downward only; violation is critical), 2. concurrency safety, 3. workspace path safety (critical: security boundary) and 4. persistence (sqlite).
copperhead CLAUDE.md
Instructions for copperheadhq/copperhead, covering claude.md, what this repo is, sources of truth, workflow (openspec) and architecture (per spec.md §2).