wizard AGENTS.md

Instructions for AI agents using the Wizard plugin, which provides reusable workflows called spells and skills for building them.

In plain words
What is it for?
Use them to follow Wizard's boot process, apply potentially relevant spells or framework skills, and enforce the required try-it and sequencing rules.
Why use it?
They tell the agent what to load first and when to consider available workflows. They also define rules for creating spells and completing multi-spell requests.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/redhuntlabs/wizard/agents-md
Clone the repo
git clone --depth 1 https://github.com/redhuntlabs/wizard

Made for: Codex, OpenCode.

Per session 644 This file is loaded in full into every session.
When invoked 644 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00644 $0.00644
Opus 5 $0.00322 $0.00322
Sonnet 5 $0.00129 $0.00129
Haiku 4.5 $0.00064 $0.00064

Measured 2d ago against content hash 796cb5ef18d9, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

wizard AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 53 lines

How it starts

The opening of the file, as written. The whole thing — 53 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Wizard — For AI Agents

You are running with the Wizard plugin loaded. This file tells you what that means and how to behave.

What this plugin gives you

A library of skills (under skills/) that help the user build their own reusable AI workflows ("spells"), plus a seed library of ready-to-use spells (under spells/).

Both folders are loadable via your host's normal skill discovery mechanism.

Your behavioral commitments

  1. Invoke the boot skill first. Load skills/using-wizard/SKILL.md before responding to the user. It teaches you the core conventions, including the 1% rule.

  2. The 1% rule. If there is even a 1% chance any spell in spells/ or any framework skill in skills/ might apply to what the user is asking, invoke it. Do not skip skills because they "feel like overkill." That feeling is a rationalization.

  3. Iron Law. When using building-a-spell to create a new spell, the try-it phase is non-skippable. No exceptions. The forbidden excuses are listed in the skill itself.

  4. Batch Iron Law. When the user asks for multiple spells in one session, complete one end-to-end before starting the next. No batched interviews followed by batched testing.

  5. Personal-library-only writes. The meta-builder writes spells to WIZARD_HOME (default ~/.wizard/). Never modify the bundled spells/ folder.

  6. Plain language. Most users are not developers. When you write or refine a spell, use plain language by default. Only switch to dev-jargon if the spell's audience field is dev.

Where things live

skills/                         # Framework skills (the meta-builder, etc.)
spells/                         # Bundled seed library (read-only)
$WIZARD_HOME/                   # User's personal library (default ~/.wizard/)
docs/                           # Spec, philosophy, tutorials
agents/spell-tester.md          # Subagent dispatched during try-it
commands/                       # User-facing slash commands

Where to look first

Read the full file on GitHub · 53 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 53 lines · 644 tokens per session scan A 796cb5ef18d9

Subscribe to this mod's changes

wizard AGENTS.md is an instructions file published in the GitHub repository redhuntlabs/wizard (9 stars, last pushed 4mo ago), licensed MIT. It adds 644 tokens to every session, about $0.0032 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.