x2markdown AGENTS.md

A set of working rules for AI coding agents contributing to the x2markdown Chrome extension. It covers Chinese documentation, browser code limits, webpage content extraction, and how to verify changes.

In plain words
What is it for?
Use it when changing x2markdown’s Chrome extension, especially its webpage-to-Markdown extraction, DOM selectors, documentation, and manual verification steps.
Why use it?
It gives agents clear boundaries so they do not add unwanted frameworks or dependencies, rely on fragile webpage selectors, or produce incomplete Markdown without reporting an error.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/ruochenlyu/x2markdown/agents-md
Clone the repo
git clone --depth 1 https://github.com/RuochenLyu/x2markdown

Made for: Codex, OpenCode.

Per session 369 This file is loaded in full into every session.
When invoked 369 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00369 $0.00369
Opus 5 $0.00185 $0.00185
Sonnet 5 $0.00074 $0.00074
Haiku 4.5 $0.00037 $0.00037

Measured 2d ago against content hash 288fe3cf6e23, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

x2markdown AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 42 lines

What it actually says

x2markdown 协作约定

本文件面向参与本仓库的 AI 编程代理,用来约束实现方式和文档风格。

基本约束

  • 产品文案使用中文。
  • 项目文档使用中文。
  • 代码标识符、文件名和注释保持英文或中性技术命名。
  • 许可证文件使用标准 MIT 英文正文。

技术边界

  • 保持原生 Chrome Manifest V3。
  • 默认不引入构建工具。
  • 默认不引入运行时依赖。
  • 不加入 React、Vite、TypeScript 或 UI 框架,除非仓库目标发生变化。

DOM 与提取策略

  • 优先使用语义节点和稳定属性:
    • article
    • time[datetime]
    • data-testid
    • h1
  • 不依赖混淆 class。
  • 不依赖中英文 aria-label 文案做主选择器。
  • 选择器失效时,应优先明确报错,而不是输出残缺 Markdown。

改动原则

  • 小步改动,避免把新功能、重构和依赖升级混在一起。
  • 尽量先完成最小可验证闭环,再扩展功能。
  • 不新增与当前展示型开源定位无关的流程文件。
  • 不创建 CONTRIBUTING.md、issue 模板或 PR 模板。

验证要求

  • 每次修改应至少做静态检查。
  • 涉及 DOM 提取时,应给出手工验证步骤和预期结果。
  • 如果无法完成浏览器内实测,需要在结果说明中明确指出。
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 42 lines · 369 tokens per session scan A 288fe3cf6e23

Subscribe to this mod's changes

x2markdown AGENTS.md is an instructions file published in the GitHub repository RuochenLyu/x2markdown (11 stars, last pushed 2mo ago), licensed MIT. It adds 369 tokens to every session, about $0.0018 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.