Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/pouriya/espai/agents-mdgit clone --depth 1 https://github.com/pouriya/espaiWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.04559 | $0.04559 |
| Opus 5 | $0.02279 | $0.02279 |
| Sonnet 5 | $0.00912 | $0.00912 |
| Haiku 4.5 | $0.00456 | $0.00456 |
Grade A, and why
espai AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
commit.** Keep it markdown — it is read straight out of `curl` output. How it starts
The opening of the file, as written. The whole thing — 296 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Guidelines
Coding conventions for this project. Follow these when writing or modifying code.
Kept plain
The native host is one main.rs with four dependencies; the extension is six
files the browser loads as they are — no bundler, no npm, no build step beyond copying them
next to the manifest rendered from the template in extension/. Anything you
add should pay for the loss of "read one file, understand the system".
The style rules below favour locally-readable code over idiomatic density. They are choices, not oversights — do not "modernize" them into iterator chains, combinator pipelines, or extracted abstractions.
Generic primitives, never site adapters
No twitter.js, no instagram.js. Those sites regenerate their markup continuously, so a
selector committed here breaks within weeks with nothing to warn us but a user reporting that
likes silently stopped working. Snapshot-with-refs, trusted input and the network capture are
site-agnostic and together they are enough. Anything site-shaped belongs in the agent's
prompt, where it costs nothing to be wrong.
Never write to stdout
println! is a fatal bug. stdout is the native messaging channel: one stray byte
desynchronises the length-prefixed frames, Chrome sees a garbage length and kills this
process. The symptom is a silent disconnection, not an error.
Diagnostics go to stderr via eprintln!, prefixed espai:. We inherit Chrome's stderr, so
they land wherever Chrome was started from — a terminal, or nowhere. Nothing may depend on a
human seeing them.
How Chrome starts and kills this process
- One host process per
connectNative(), not per tab or per browser, and lazily: nothing runs until the service worker connects.argv[1]is the calling extension's origin, and the working directory is unspecified, so never use a relative path. - Chrome, Chromium, Edge and Brave each read the host manifest from their own profile
root, and one in the wrong root is silently ignored — the extension loads fine and the host
never starts.
make install-chrome/install-chromiumcopy it where that browser looks. - Those targets fail on a profile root that does not exist rather than creating one, since
a manifest under
~/.config/google-chromeon a Chromium-only machine is a directory that looks installed and is never read. Edge and Brave get no target for the same reason.install.shwrites every root that already exists and creates none. - Manifests point at
bin/espai, whichreleasecopies out oftarget/. A path intotarget/breaks on the nextcargo clean, and a missing binary looks exactly like a missing manifest. versioninCargo.tomland inmanifest.chromium.json.inare bumped in the same commit — the halves speak a private frame protocol and ship as one thing.make check-versionenforces it, and Chrome refuses a version that goes backwards.- Shutdown is EOF on stdin, so
UnexpectedEofon the length read is the ordinary exit path, not an error to log loudly.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 296 lines · 4,559 tokens per session scan A 1f0fbece0a30
espai AGENTS.md is an instructions file published in the GitHub repository pouriya/espai (11 stars, last pushed 23d ago), licensed MIT. It adds 4,559 tokens to every session, about $0.0228 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
unraid-management-agent AGENTS.md
Instructions for ruaan-deysel/unraid-management-agent, covering agents.md — ai agent instructions, project identity, project structure, architecture and event-driven pubsub design.
kglite CLAUDE.md
Instructions for kkollsga/kglite, covering kglite — claude code conventions, build & test, architecture, the boundary principle (wrappers vs core) — summary and in-memory is the core product.
adeu GEMINI.md
Instructions for dealfluence/adeu, covering adeu — native track changes for ai, available tools, readdocx, processdocumentbatch and applytextrevision.
TibiaWikiApi AGENTS.md
Instructions for benjaminkomen/TibiaWikiApi, covering tibiawikiapi — agent notes, what this is, stack, build / run and tests (gradle).
MCP-Airflow-API copilot-instructions.md
Instructions for call518/MCP-Airflow-API, covering copilot instructions for mcp-airflow-api, project architecture, critical patterns, functions.py - persistent session with retry strategy and standard pattern in airflowapi.py.
openings-mcp AGENTS.md
Instructions for amikai/openings-mcp, a project described as: 💼 One MCP server to search job boards and company career sites.