Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/sandsaber/grimoire/agents-mdgit clone --depth 1 https://github.com/sandsaber/GrimoireWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.04189 | $0.04189 |
| Opus 5 | $0.02094 | $0.02094 |
| Sonnet 5 | $0.00838 | $0.00838 |
| Haiku 4.5 | $0.00419 | $0.00419 |
Grade E, and why
Grimoire AGENTS.md scanned grade E with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
<!-- rtk-instructions v2 --> Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://raw.githubusercontent.com/rtk-ai/rtk/refs/heads/master/install.sh | sh Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://raw.githubusercontent.com/rtk-ai/rtk/refs/heads/master/install.sh | sh How it starts
The opening of the file, as written. The whole thing — 317 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Instructions
Grimoire is a private, pre-release Obsidian plugin that embeds agentic CLI assistants in a vault-native workspace. It is not a standalone CLI. The plugin shell must stay provider-neutral while provider adapters wrap external tools such as Claude Code, Codex, OpenCode, Qwen Code, and Antigravity CLI.
Repository documentation and user-facing product copy should be in English unless the task explicitly targets localized UI text.
Instruction Layout
AGENTS.mdis the canonical shared instruction file for coding agents.CLAUDE.mdfiles exist so Claude Code can load the same instructions. They should import the nearestAGENTS.mdand contain only Claude-specific additions.- Keep root instructions durable. Put path-specific details in nested
AGENTS.mdfiles next to the code they govern. - If a design handoff directory is named by the user, treat it as the source of truth for that task. Keep temporary handoff/debug artifacts untracked unless the user explicitly asks to commit them.
Provider Directories
src/providers/claude/- Claude Code SDK adapter and Claude-compatible vault files.src/providers/codex/- Codex app-server adapter and Codex-owned workspace services.src/providers/antigravity/- Antigravity CLI print-mode adapter and Google's official Gemini CLI replacement.src/providers/gemini/- Legacy Gemini CLI ACP adapter and Google-owned runtime, history, settings, and UI behavior.src/providers/grok/- Grok Build ACP adapter and xAI-owned runtime, history, settings, and UI behavior.src/providers/opencode/- OpenCode ACP adapter and launch/workspace artifacts.src/providers/mimocode/- MiMoCode ACP adapter and launch/workspace artifacts.src/providers/kimicode/- Kimi Code ACP adapter and launch/workspace artifacts.src/providers/qwen/- Qwen Code ACP adapter and Qwen-owned runtime, history, settings, and UI behavior.src/providers/acp/- Shared ACP transport and normalization helpers.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 317 lines · 4,189 tokens per session scan E a3fcdedcd2e9
Grimoire AGENTS.md is an instructions file published in the GitHub repository sandsaber/Grimoire (31 stars, last pushed 3d ago), licensed MIT. It adds 4,189 tokens to every session, about $0.0209 per session on Opus 5. A static security scan graded it E with 3 findings (hidden instructions, downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
TokenPilot AGENTS.md
AGENTS.md instructions for eowlsdh/TokenPilot, covering project knowledge base, structure, where to look, code map and conventions.
TokenPilot CLAUDE.md
Claude Code instructions for eowlsdh/TokenPilot, a project described as: Local-first macOS menu bar utility for AI coding-tool usage metadata.
daily-work-planner AGENTS.md
Instructions for Stephen-studying/daily-work-planner: This repository contains a portable work-session planning skill. The installable skill folder is daily-work-planner/.
memory-harbor AGENTS.md
AGENTS.md instructions for qiontoo/memory-harbor, covering memory harbor instructions, system identity, startup, placement and safety.
OctoOffice AGENTS.md
Instructions for Chepko932/OctoOffice, covering octooffice orchestration rules, language rule, default skill bootstrap, workflow orchestration (additive) and 1) plan node default.
barkeep AGENTS.md
Instructions for iannuttall/barkeep, covering agent notes, product rules, repo map, commands and app structure.