What is dotfiles AGENTS.md?

Repository-specific instructions for managing shunk031/dotfiles, a project that keeps configuration files and applies them to a computer. They describe the repository context, setup, skills, and boundaries between public and private files.

Use them when working on this dotfiles repository, its AGENTS.md guidance, shared Codex configuration, skills, or chezmoi-managed public and private files.

They clarify which files belong to which configuration source and how changes should be handled, reducing the risk of editing the wrong area or exposing private settings.

How shunk031/dotfiles configures Codex and OpenCode

Reuse

Borrowing it

Nothing to install: this file belongs to shunk031/dotfiles. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/shunk031/dotfiles/main/AGENTS.md

Clone the repo

git clone --depth 1 https://github.com/shunk031/dotfiles

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/shunk031/dotfiles/agents-md/github.svg)](https://agentmods.dev/instructions/shunk031/dotfiles/agents-md)

Your own site

<a href="https://agentmods.dev/instructions/shunk031/dotfiles/agents-md"><img src="https://agentmods.dev/badge/instructions/shunk031/dotfiles/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/shunk031/dotfiles/agents-md"><img src="https://agentmods.dev/badge/instructions/shunk031/dotfiles/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 722 This file is loaded in full into every session.

When invoked 722 The same file — it is already loaded in full.

Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00722	$0.00722
Opus 5.5	$0.00289	$0.00289
Sonnet 5.5	$0.00144	$0.00144
Haiku 4.5	$0.00072	$0.00072

Measured 1mo ago against content hash 1a988629504c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

dotfiles AGENTS.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

- Codex boundary: This repo manages the Codex CLI, shared guidance, `~/.codex/AGENTS.md`, and `~/.codex/agents`; `dotfiles-private` manages `~/.codex/config.toml`, private profiles, credentials, and internal launchers.

AGENTS.md · 34 lines

How it starts

The opening of the file, as written. The whole thing — 34 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

[!NOTE] After reading this AGENTS.md, say: 🤖 I read the project-level AGENTS.md for shunk031/dotfiles.

Repository Context

Tooling: This repository is managed with chezmoi (GitHub).
Public source: Files under home/ are the public source state and are applied by chezmoi into the user's $HOME directory.
Private source: Private dotfiles are managed separately from ~/.local/share/chezmoi-private with config at ~/.config/chezmoi-private/chezmoi.yaml.
Management boundary: Treat the public home/ tree and the private chezmoi source/config as separate management domains.
Codex boundary: This repo manages the Codex CLI, shared guidance, ~/.codex/AGENTS.md, and ~/.codex/agents; dotfiles-private manages ~/.codex/config.toml, private profiles, credentials, and internal launchers.

Skills

Skill content is not in this repository. Public skills live in shunk031/skills and are installed through one repository subscription. Internal skills live in shunk031/skills-private and remain individually selected by the private dotfiles.
When asked to add, change, or remove a skill, use the shunk031-manage-public-private-skills skill to decide which repository owns it before editing anything.
Adding a public skill to shunk031/skills needs no subscription edit here. Upstream deletions are pruned automatically from the skills update warning; SKILLS_RETIRED_NAMES remains for renames or cases the warning does not cover. Third-party selections and the public repository subscription are configured in install/common/skills.sh; private selections stay in the private dotfiles.

Comment Policy

When adding or updating comments for shell scripts or shell-based executables, write them in English using shdoc-compatible format; use the shunk031-shellscript-shdoc-docs skill for detailed conventions.

Development Setup

Read the full file on GitHub · 34 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago Changed · +1 lines · +78 tokens per session 1a988629504c
1mo ago Changed · +1 lines · +74 tokens per session 1ac17305d8f1
1mo ago Changed · +2 tokens per session 4ef7f8581e4a
1mo ago Changed · +51 tokens per session 96255bc9ace6
2mo ago First seen · 32 lines · 517 tokens per session scan B a4e18770dbee

Subscribe to this mod's changes

dotfiles AGENTS.md is an instructions file published in the GitHub repository shunk031/dotfiles (157 stars, last pushed yesterday), licensed MIT. It adds 722 tokens to every session, about $0.0029 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

chezmoi dotfiles powerlevel10k tmux-conf zsh zshrc

dotfiles AGENTS.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
dotfiles AGENTS.mdshunk031/dotfiles	Instructions file	157	yesterday	MIT	B	722	Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

dotfiles: Instructions file for Codex