Borrowing it
Nothing to install: this file belongs to PIsberg/vibetags. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/PIsberg/vibetags/main/GEMINI.mdgit clone --depth 1 https://github.com/PIsberg/vibetagsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/pisberg/vibetags/gemini-md)<a href="https://agentmods.dev/instructions/pisberg/vibetags/gemini-md"><img src="https://agentmods.dev/badge/instructions/pisberg/vibetags/gemini-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/pisberg/vibetags/gemini-md"><img src="https://agentmods.dev/badge/instructions/pisberg/vibetags/gemini-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01411 | $0.01411 |
| Opus 5.5 | $0.00564 | $0.00564 |
| Sonnet 5.5 | $0.00282 | $0.00282 |
| Haiku 4.5 | $0.00141 | $0.00141 |
Grade A, and why
vibetags GEMINI.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 49 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GEMINI.md
AI guardrails for Google Gemini, generated from source annotations by
VibeTags itself (dogfooding, mvn compile -Pself-annotate from vibetags/).
The region between the VIBETAGS-START and VIBETAGS-END markers is regenerated
on every self-annotate compile; never hand-edit inside it. Per-element detail
lives in .gemini/rules/, indexed from the block below.
GEMINI AI INSTRUCTIONS
Generated by VibeTags | https://github.com/PIsberg/vibetags
LOCKED FILES (DO NOT MODIFY)
Do not suggest modifications to the following files:
se.deversity.vibetags.processor.AIGuardrailProcessor.generateFiles(): Step order is load-bearing: fingerprint check → sidecar write → sidecar read → merge → file write → cache flush; reordering steps silently skips regeneration or corrupts multi-module outputse.deversity.vibetags.processor.internal.TransitiveManifest.RESOURCE_PACKAGE: Must stay a valid Java package name. javac's CLASS_PATH location skips archive directories that are not package identifiers, so moving these manifests under META-INF/ leaves Filer.getResource listing zero entries and transitive discovery fails silently while the conventional location looks correct. TransitiveManifestPathTest pins the working path.se.deversity.vibetags.processor.model.GuardrailAnnotations.ALL: Append only. This order fixes the insertion order of every LinkedHashSet downstream, so reordering or removing an entry rewrites generated files in every consuming build, with nothing failing to name the cause. BuildFingerprint hashes in its own separately pinned order; the two are not the same list and must not be aligned.
CORE FUNCTIONALITY (EXTREME CAUTION)
The following elements are well-tested core components. Make changes with extreme caution:
se.deversity.vibetags.processor.AIGuardrailProcessor: Sensitivity: critical. Note: Runs inside every consumer's javac: process() turns a RuntimeException into a WARNING (an ERROR in check mode), and anything escaping that catch fails their buildse.deversity.vibetags.processor.internal.GuardrailFileWriter: Sensitivity: high. Note: Invariant 2 lives here: hand-authored content outside VIBETAGS-START/END must never be overwritten or lostse.deversity.vibetags.processor.internal.ModuleSidecar: Sensitivity: high. Note: The .vibetags-mod-* format is read by modules compiled separately, possibly by another processor version; changing it breaks themse.deversity.vibetags.processor.internal.PartialRoundDetector: Sensitivity: high. Note: Both conditions in unreadAnnotatedSources are load-bearing and neither may be dropped as redundant: without the missing-element check an excluded-but-annotated source stops VibeTags writing for good, and without the unread-source check a genuinely deleted annotation can never have its rule file retiredse.deversity.vibetags.processor.internal.WriteCache: Sensitivity: high. Note: A false positive, stale output taken as unchanged, silently leaves generated files wrong
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 14d ago Changed · +7 tokens per session 7ac21a0b020a
- 16d ago Changed · +9 tokens per session 38cfe3801d90
- 26d ago Changed · -29 lines · -349 tokens per session a222998638f1
- 1mo ago Changed · -62 lines · -865 tokens per session 04ec2bed38a2
- 1mo ago Changed · +80 lines · +1,180 tokens per session fb0cb601f97e
- 1mo ago Changed · +1 lines · -2 tokens per session 7c66788f147d
- 1mo ago Changed · +6 tokens per session 602029c940dc
- 1mo ago Changed · +2 lines · +133 tokens per session 18de77005d8a
- 1mo ago Changed · +8 lines · -69 tokens per session db2691d49c88
- 1mo ago First seen · 49 lines · 1,361 tokens per session scan A 1d4a98c42991
vibetags GEMINI.md is an instructions file published in the GitHub repository PIsberg/vibetags (25 stars, last pushed today), licensed MIT. It adds 1,411 tokens to every session, about $0.0056 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
deno copilot-instructions.md
Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.