Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/rexleimo/aios/gemini-mdgit clone --depth 1 https://github.com/rexleimo/aiosWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01138 | $0.01138 |
| Opus 5 | $0.00569 | $0.00569 |
| Sonnet 5 | $0.00228 | $0.00228 |
| Haiku 4.5 | $0.00114 | $0.00114 |
Grade A, and why
aios GEMINI.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.
MCP Tools: code-review-graph
This project exposes a structural knowledge graph via the code-review-graph MCP. Use it only when structural relationships materially affect the current decision; do not turn routine work into a graph-tool loop.
Bounded checkpoints
- Initial orientation: call
get_minimal_context(task="...")at most once when repository structure is not already clear. - Before a risky or multi-file change: use
get_impact_radius(detail_level="minimal"); callquery_graph(pattern="tests_for", target="...")only for the concrete target being changed. - After edits: call
detect_changes(detail_level="minimal")once when the graph was used or the change has meaningful blast radius. - Before submitting: use
get_affected_flows()orget_suggested_questions()only if unresolved structural risk remains. - Finding code: prefer
semantic_search_nodeswhen semantic graph search is likely to beat a direct repository search. - Budget: no more than three graph calls per work item. Treat
next_tool_suggestionsas optional hints and never follow them recursively.
Planning context proposals
When an active structured-plan task has implementation targets, call AIOS MCP aios_plan_task with action="propose_context", the task id, and workspace-relative targets when the task has none. The tool derives target, caller, callee, and test candidates from codemap, but it does not modify the active plan. Present the candidate refs to a human. An explicit human-controlled CLI confirmation with aios plan task <id> --confirm-context-candidates (optionally repeated --candidate-ref <ref>) activates selected refs for orchestration; it is a process boundary, not an identity/authentication boundary. Do not claim context will be delivered before that command succeeds.
AIOS native enhancements are active in this repository. This is the shared workflow core for every supported coding client.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 94 lines · 1,138 tokens per session scan A dda0986d80a8
aios GEMINI.md is an instructions file published in the GitHub repository rexleimo/aios (52 stars, last pushed 3d ago), licensed MIT. It adds 1,138 tokens to every session, about $0.0057 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
apm python.instructions.md
Python development guidelines.
CodexPotter AGENTS.md
Instructions for breezewish/CodexPotter, covering repository guidelines, workflow principles, engineering rules, core principles: simplicity & readability and better maintainability.
squarebox CLAUDE.md
Instructions for SquareWaveSystems/squarebox, covering claude.md, agent skills, issue tracker, triage labels and domain docs.
browser-agent CLAUDE.md
Instructions for uiuing/browser-agent, a project described as: An open-source AI agent for the browser. Bring any model. It plans in the side panel, acts on real pages through tools, and verifies every claimed result against the live DOM — with guardrails and reusable skills.
CodexBar AGENTS.md
AGENTS.md instructions for bob-zebedy/CodexBar, covering repository guidelines, 项目结构与模块组织, 构建、测试与开发命令, 写作风格 and 代码和注释.
fast-browser CLAUDE.md
Claude Code instructions for m4ttstack/fast-browser, covering fast browser plugin, where a change belongs, fork branch: use fast-browser-runtime, releasing a new runtime and re-pinning this repo: use the script.