exeslim AGENTS.md

Deployment instructions for exeslim, a small exe.dev server image containing system services, security certificates, and basic network tools. It is meant to run applications built elsewhere.

In plain words
What is it for?
Installing only needed system packages, deploying prebuilt applications, managing systemd services, restarting them, and debugging through persistent logs.
Why use it?
It prevents developers from assuming that common programming tools or Docker are installed on the deployment machine, and explains where to find service logs.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/ryanlewis/exeslim/agents-md
Clone the repo
git clone --depth 1 https://github.com/ryanlewis/exeslim

Made for: Codex, OpenCode.

Per session 288 This file is loaded in full into every session.
When invoked 288 The same file — it is already loaded in full.
Security scan B 2 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00288 $0.00288
Opus 5 $0.00144 $0.00144
Sonnet 5 $0.00058 $0.00058
Haiku 4.5 $0.00029 $0.00029

Measured 2d ago against content hash d9cbcc7f29bd, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

exeslim AGENTS.md scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

docker, nginx, Chrome. `apt` works, so `sudo apt-get install <pkg>` is fine for

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

It is a deployment target: a minimal base carrying systemd, TLS roots and curl,
AGENTS.md · 25 lines

What it actually says

You are running in an exe.dev VM.

https://exe.dev/docs/proxy.md has details about the exe.dev HTTPS proxy.

Only use documented exe.dev features (see https://exe.dev/docs.md). Undocumented local endpoints are internal infrastructure—unstable and unsupported.

This VM runs exeslim, not exeuntu

It is a deployment target: a minimal base carrying systemd, TLS roots and curl, and nothing else. Do not assume the usual exeuntu toolbox is present.

Not installed: compiler/build-essential, python, node, Go, uv, git, docker, nginx, Chrome. apt works, so sudo apt-get install <pkg> is fine for anything you genuinely need — but prefer building artifacts elsewhere and shipping them here, which is how this box is meant to be used.

Services are systemd units. Start/stop with systemctl, and read logs with journalctl -u <name> — journald storage is persistent, and with no toolchain on the box it is the main debugging surface.

The app is normally a prebuilt binary deployed by scp/rsync from a laptop or CI, then restarted via systemd. Anything you install directly on the VM is lost if it is recreated from a fresh image, so durable changes belong in the deploying repo, not here.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 25 lines · 288 tokens per session scan B d9cbcc7f29bd

Subscribe to this mod's changes

exeslim AGENTS.md is an instructions file published in the GitHub repository ryanlewis/exeslim (5 stars, last pushed 8d ago), licensed MIT. It adds 288 tokens to every session, about $0.0014 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.