Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/sonichi/sutando/agents-mdgit clone --depth 1 https://github.com/sonichi/sutandoWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.08576 | $0.08576 |
| Opus 5 | $0.04288 | $0.04288 |
| Sonnet 5 | $0.01715 | $0.01715 |
| Haiku 4.5 | $0.00858 | $0.00858 |
Grade A, and why
sutando AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- sutando CLAUDE.md — 100% identical, 10 lines differ
How it starts
The opening of the file, as written. The whole thing — 379 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sutando
You are operating as part of Sutando — a personal AI agent that belongs entirely to the user. This is the Sutando implementation overview.
Identity
You are Sutando's task execution engine. Handle anything delegated: research, writing, email, scheduling, code, financial tasks, web browsing, file management, content creation. Complete tasks the way the user would — match their voice and working style.
For irreversible actions (sending email, deleting files, financial transactions), confirm before executing unless standing approval has been given.
Operating Style
Be concise and direct. Prefer action over explanation. Default to the smallest action that produces the desired outcome. Always do less — make the minimal change needed.
"at background" / "in parallel" means SPAWN A SUBAGENT (Chi 2026-08-21) — not "keep this in
mind", and not a licence to defer to a later session. Too large for your remaining context is the
reason TO delegate, not to hand it back. If no mechanism is available, do it inline and say so —
never report work as delegated when nothing was spawned.
Escapes, model choice, and the do-not-delegate list: docs/subagent-delegation.md.
Architecture rules
Rationale + worked examples for every boundary rule below (quoted section names) live in docs/architecture-boundaries.md — read the named section before working on that boundary.
- Core services (
src/,skills/phone-conversation/) are general-purpose infrastructure. They provide generic capabilities (audio streaming, task bridge, tool execution) but must NOT contain feature-specific logic. - Skills (
skills/) contain feature-specific logic. Each skill is self-contained and optional — core services work without any skill installed. When implementing new capabilities, start as a skill. - Shared adapter policy is core; provider I/O stays at the edge. Two or more adapters interpreting the same workspace state → a dependency-light
src/module; never copy policy code between bridges. → "Shared adapter policy" - A shared mutable-state record has one writer contract (schema, bounds, atomicity, failure semantics); concurrency tests call the production writer. Centralize only semantically identical writers. → "Shared adapter policy"
- Inline tools are only for tools that need instant response from Gemini. Prefer skill scripts for complex logic. Only promote to inline if the user says the skill approach is too slow.
- Skill config goes in the skill's
manifest.jsonconfigblock — not ad-hoc env vars. Seeskills/MANIFEST.mdfor the convention — declaration, theCLI > env > manifest > config-file > stateread-precedence, and config-only manifests. Don't invent an undocumented env var (Chi 2026-06-16). - Optional capability discovery stays at the adapter edge. Adapters inject script/capability paths; core helpers must not name, locate, or import a concrete skill. → "Optional adapter capabilities"
- Outbound delivery of an already-published result has one implementation: the outbox (
src/outbox.pyclaims +src/outbox_adapter.pyoutcomes; vendored intopackages/ag2-sparrow/). Never re-implement claim, delivered-sentinel, or retry machinery in a bridge. → "Outbound delivery ownership" - HTTP handlers centralize transport mechanics; route methods are dispatch layers — a route parses, calls one named unit, emits its result; contract-test delegation, status codes, headers, payload shapes. → "HTTP transport handlers" + "HTTP route boundaries"
- When refactoring, do NOT change prompts or tool behavior. Prompts are tuned through testing and must be preserved exactly.
- Code comments: at most 2 lines, and only what the code cannot state itself. Give the constraint or the non-obvious reason. No narration, no incident history, and no references to PRs, issues, people, or other systems — that context belongs in the commit message and PR body, where it stays checkable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 379 lines · 8,576 tokens per session scan A 2b67f831c338
sutando AGENTS.md is an instructions file published in the GitHub repository sonichi/sutando (389 stars, last pushed 2d ago), licensed MIT. It adds 8,576 tokens to every session, about $0.0429 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
vellum-assistant AGENTS.md
AGENTS.md instructions for vellum-ai/vellum-assistant, covering vellum assistant — agent instructions, project structure, intellectual honesty, development and dependencies.
personal-model AGENTS.md
Instructions for Intuition-Lab/personal-model, covering agents.md, runtime boundary, commands, pipeline and documentation map.
personal-model CLAUDE.md
Instructions for Intuition-Lab/personal-model: Read and follow AGENTS.md. It is the single agent orientation for this repository: Runtime boundary, commands, architecture, invariants, current documentation, privacy rules, and DCO workflow.
Shiori-v1 CLAUDE.md
Instructions for kaorii-ako/Shiori-v1, covering gstack, skill routing, shiori — claude code guide, commands and install all deps (root + client + server).
Shiori-v1 AGENTS.md
Instructions for kaorii-ako/Shiori-v1, covering shiori — codex guide, commands, install all deps (root + client + server), dev (runs both client :5173 and server :3001) and client only.
pin-it-public AGENTS.md
Instructions for johnnyzhoujz/pin-it-public, covering pin it repository guidance, working practices and packaged-app testing.