ai-agent-rules-generator copilot.instructions.md

A project-specific coding guide for a WooCommerce payment gateway plugin. A payment gateway connects an online shop to a payment provider so customers can pay at checkout.

In plain words
What is it for?
Use it for work on the plugin's PHP code, payment API connection, webhooks, checkout, admin settings, templates, assets, database access, and project documentation.
Why use it?
It gives coding agents the plugin's structure, technologies, payment methods, and documentation rules before they change the code.

Instructions file for GitHub Copilot

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/savedpixel/ai-agent-rules-generator/copilot
Clone the repo
git clone --depth 1 https://github.com/savedpixel/ai-agent-rules-generator

Made for: GitHub Copilot.

Per session 3,431 This file is loaded in full into every session.
When invoked 3,431 The same file — it is already loaded in full.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.03431 $0.03431
Opus 5 $0.01716 $0.01716
Sonnet 5 $0.00686 $0.00686
Haiku 4.5 $0.00343 $0.00343

Measured 2d ago against content hash a84c26dfdb8c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

ai-agent-rules-generator copilot.instructions.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- Use WordPress nonces for forms/AJAX; `wp_remote_post`/`wp_remote_get` for HTTP — never raw `curl`
examples/glitch-payment-gateway/v1.0/generated/.github/instructions/copilot.instructions.md · 288 lines

How it starts

The opening of the file, as written. The whole thing — 288 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Glitch WooCommerce Payment Gateway — Copilot Instructions

Project Overview

A bespoke WooCommerce payment gateway plugin for Glitch, a major South African payment provider. Enables merchants to accept online payments (cards, instant EFT, digital wallets, bank transfers) through WooCommerce while routing transactions through Glitch's payment infrastructure.

  • Plugin Root: ./ — Main plugin file, bootstrap, constants
  • Includes: includes/ — Gateway class, API client, webhook handler, admin settings, payment methods
  • Templates: templates/ — Checkout and admin template overrides
  • Assets: assets/ — CSS, JS, and image assets for checkout and admin
  • Docs: docs/ — Architecture, feature logic, and task documentation
  • Examples: examples/ — Project description and reference material

Stack

  • Platform: WordPress 6.x · WooCommerce 8.x+
  • Language: PHP 7.4+ / 8.x
  • Database: MySQL/MariaDB via WordPress $wpdb
  • Package Manager: Composer (for autoloading and dev dependencies)
  • Payment API: Glitch Payment Gateway REST API
  • Currency: ZAR (South African Rand)
  • Admin UI: WooCommerce Settings API
  • Checkout UI: WooCommerce checkout hooks + PHP templates
  • HTTP Client: WordPress HTTP API (wp_remote_post, wp_remote_get)
  • Logging: WooCommerce Logger (wc_get_logger())
  • Testing: PHPUnit (WordPress test suite), WP-CLI for integration testing
  • Linting: PHP_CodeSniffer with WordPress Coding Standards

Folder Structure

glitch-woocommerce-gateway/
├── glitch-gateway.php              ← Main plugin file (bootstrap)
├── includes/
│   ├── class-glitch-gateway.php    ← WC_Payment_Gateway subclass
│   ├── class-glitch-api.php        ← Glitch API client
│   ├── class-glitch-webhooks.php   ← Webhook handler
│   ├── class-glitch-refunds.php    ← Refund processing
│   ├── class-glitch-methods.php    ← Payment method management
│   └── class-glitch-logger.php     ← Debug logging wrapper
├── templates/
│   ├── checkout/                   ← Checkout form templates
│   └── admin/                      ← Admin settings templates
├── assets/
│   ├── css/                        ← Stylesheets
│   ├── js/                         ← Scripts
│   └── images/                     ← Icons and logos
├── languages/                      ← i18n translation files
├── docs/                           ← Documentation
│   ├── logic/                      ← Feature logic docs
│   ├── reports/                    ← Generated reports
│   ├── server/                     ← Server/deployment docs
│   ├── agent-observations/         ← Agent observation logs
│   └── task/                       ← Task tracking
└── tests/                          ← PHPUnit tests

Read the full file on GitHub · 288 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 288 lines · 3,431 tokens per session scan A a84c26dfdb8c

Subscribe to this mod's changes

ai-agent-rules-generator copilot.instructions.md is an instructions file published in the GitHub repository savedpixel/ai-agent-rules-generator (7 stars, last pushed 4mo ago), licensed MIT. It adds 3,431 tokens to every session, about $0.0172 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

copilot-setting AGENTS.md

AGENTS.md instructions for zexion7873/copilot-setting, covering copilot-setting — agent guide, communication language, repository purpose, validation commands and architecture.

zexion7873/copilot-setting · 2,786 tokens

copilot-setting java.instructions.md

Load when writing or reviewing .java code — Java 8 version-lock floor: syntax, exceptions, logging, concurrency. Triggers on: var, records, text blocks, List.of/Map.of, pattern matching, java.time, BigDecimal, SLF4J. Forces Java 8, not modern Java. Defer SQL/Spring/JSP to their files.

zexion7873/copilot-setting · 1,326 tokens

copilot-setting spring-hibernate.instructions.md

Load when writing or reviewing Java or hbm.xml on a Spring 3.2 + Hibernate 4.2 stack — native Session API, XML mappings/tx, Spring MVC. Triggers on: getCurrentSession (not openSession), hbm.xml (not JPA @Entity), (not @Transactional), @Controller/@RequestMapping (not @GetMapping). No Spring Boot/JPA. Defer SQL to…

zexion7873/copilot-setting · 1,366 tokens

copilot-setting sql-ddl.instructions.md

Load when writing or reviewing MySQL DDL or migration scripts — CREATE/ALTER TABLE, indexes, stored procedures, backfills. Triggers on: ALTER TABLE, ALGORITHM=INSTANT/INPLACE, online schema change (pt-osc, gh-ost), rollback scripts, chunked backfill, DROP COLUMN, sp stored procedures. MySQL 8.0 / InnoDB. Query and…

zexion7873/copilot-setting · 989 tokens

copilot-setting xml-config.instructions.md

Load when writing or reviewing stack XML — Spring applicationContext, hbm.xml, web.xml, or Maven pom.xml. Triggers on: (not ), spring-beans-3.2.xsd (not 4.0), , DispatcherServlet, , scope test/provided, source/target 1.8, no -SNAPSHOT/LATEST. No Spring Boot. Defer SQL/Java to their files.

zexion7873/copilot-setting · 924 tokens

copilot-setting sql.instructions.md

Load when writing or reviewing SQL in Java code — JDBC DAOs, HQL, query tuning. Triggers on: PreparedStatement/? (no concat), :paramName, no SELECT , WHERE on UPDATE/DELETE, indexes, EXPLAIN. Raw JDBC, not Spring Boot. DDL/migrations: sql-ddl.instructions.md. Defer Hibernate queries to spring-hibernate.instructions.md.

zexion7873/copilot-setting · 732 tokens