What is agent-vault AGENTS.md?

Repository instructions for agent-vault, a project that stores reusable files used to create new project setups, including agent guidance and pull-request rules.

Use them when maintaining scaffold files, updating project-generation scripts, reviewing pull requests, or writing GitHub issues and comments with the required attribution.

They prevent project-specific notes from being mixed into the reusable templates and keep generated projects consistent with the repository’s contribution rules.

How ssheld/agent-vault configures Codex and OpenCode

Reuse

Borrowing it

Nothing to install: this file belongs to ssheld/agent-vault. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/ssheld/agent-vault/main/AGENTS.md

Clone the repo

git clone --depth 1 https://github.com/ssheld/agent-vault

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/ssheld/agent-vault/agents-md/github.svg)](https://agentmods.dev/instructions/ssheld/agent-vault/agents-md)

Your own site

<a href="https://agentmods.dev/instructions/ssheld/agent-vault/agents-md"><img src="https://agentmods.dev/badge/instructions/ssheld/agent-vault/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/ssheld/agent-vault/agents-md"><img src="https://agentmods.dev/badge/instructions/ssheld/agent-vault/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 4,324 This file is loaded in full into every session.

When invoked 4,324 The same file — it is already loaded in full.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.04324	$0.04324
Opus 5.5	$0.01730	$0.01730
Sonnet 5.5	$0.00865	$0.00865
Haiku 4.5	$0.00432	$0.00432

Measured 2mo ago against content hash 7d75d22fc610, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

agent-vault AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

- For dynamic execution and shelling out, scrutinize patterns such as `eval`, `new Function`, `child_process.exec`, and `os.system`, especially when inputs are interpolated or not clearly trusted.

AGENTS.md · 420 lines

How it starts

The opening of the file, as written. The whole thing — 420 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Repository Purpose

This repository is a template source, not project memory.

Template Maintenance Rules

Keep reusable defaults in scaffold/agent-vault/.
Do not add project-specific notes or logs to this repository.
Generate project context only via scripts/new-project.sh.
When updating generated-project behavior, modify scaffold files and script templates together.

Scope

These review guidelines apply only when performing pull request code review.
For generated projects, workflow and handoff behavior is defined in scaffold/agent-vault/AGENTS.md.

PR Authoring

For agent-authored pull requests in generated projects, follow scaffold/agent-vault/AGENTS.md section PR Authoring Standards.
Use .github/pull_request_template.md when present.

GitHub Post Attribution

For GitHub issues, issue comments, and non-review PR conversation comments, begin the body with:

> 🤖 **Post by {Model Name}** · via {Client Tool}

Use your actual model name/version when known. If the exact version is unavailable, use the best identifier you have.
If the post is specifically PR review feedback or a PR review-feedback response, use the review-policy format instead.
Never present GitHub posts as if they are the human account owner's personal opinion.
Prefer repo-relative paths or GitHub links over local filesystem paths in GitHub posts.

Compatibility Note

Root AGENTS.md intentionally inlines review-policy content for Codex compatibility in GitHub review flows.
CLAUDE.md and GEMINI.md wrappers use @.../review-policy.md imports.
Do not flag duplication itself; only flag drift between mirrored policy files.

Review Guidelines (for automated code review agents)

When performing a code review on this repository, behave like a senior backend engineer responsible for production reliability, security, maintainability, and operability.

Read the full file on GitHub · 420 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 420 lines · 4,324 tokens per session scan A 7d75d22fc610

Subscribe to this mod's changes

agent-vault AGENTS.md is an instructions file published in the GitHub repository ssheld/agent-vault (2 stars, last pushed 1mo ago), licensed MIT. It adds 4,324 tokens to every session, about $0.0173 per session on Opus 5.5. A static security scan graded it A with 1 finding (runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

ai-agent ai-agents ai-workflow-optimization

agent-vault AGENTS.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
agent-vault AGENTS.mdssheld/agent-vault	Instructions file	2	1mo ago	MIT	A	4,324	Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

agent-vault: Instructions file for Codex