Stakpak is an open-source DevOps agent that runs continuously on a machine to keep applications running and automate infrastructure work. It helps teams generate infrastructure code, troubleshoot Kubernetes, configure CI/CD, and automate deployments while limiting an LLM’s access to production. The catalogue add-ons provide commands and instructions for operating Stakpak.
Borrowing it
Nothing to install: this file belongs to stakpak/agent. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/stakpak/agent/main/AGENTS.mdgit clone --depth 1 https://github.com/stakpak/agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/stakpak/agent/agents-md)<a href="https://agentmods.dev/instructions/stakpak/agent/agents-md"><img src="https://agentmods.dev/badge/instructions/stakpak/agent/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/stakpak/agent/agents-md"><img src="https://agentmods.dev/badge/instructions/stakpak/agent/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03669 | $0.03669 |
| Opus 5.5 | $0.01468 | $0.01468 |
| Sonnet 5.5 | $0.00734 | $0.00734 |
| Haiku 4.5 | $0.00367 | $0.00367 |
Grade A, and why
agent AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 335 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md — Stakpak CLI
Agent guidance for working effectively in this codebase.
Project Overview
Stakpak is a security-hardened DevOps AI agent that runs in the terminal. It generates infrastructure code, debugs Kubernetes, configures CI/CD, and automates deployments — without giving the LLM keys to production.
- Language: Rust (edition 2024, nightly features enabled)
- License: Apache-2.0
- Repository: https://github.com/stakpak/agent
Workspace Structure
cli/ # Main binary crate (`stakpak`)
├── src/
│ ├── main.rs
│ ├── commands/
│ │ ├── agent/run/ # Agent execution engine
│ │ │ ├── mode_interactive.rs # Interactive TUI agent loop
│ │ │ ├── mode_async.rs # Async/headless mode
│ │ │ ├── stream.rs # SSE stream processing
│ │ │ ├── checkpoint.rs # Session checkpoint/resume
│ │ │ ├── tooling.rs # Tool execution
│ │ │ └── helpers.rs # Shared helpers
│ │ ├── acp/ # Agent Client Protocol (Zed integration)
│ │ ├── mcp/ # MCP server/proxy commands
│ │ ├── auth/ # Login/account commands (interactive + non-interactive setup)
│ │ ├── autopilot/ # Autopilot: init, up/down, status, schedule, channel
│ │ └── watch/ # Scheduled task runtime (internal, driven by autopilot)
│ ├── config/ # Configuration management
│ │ ├── file.rs # ConfigFile with profiles + ensure_readonly()
│ │ ├── profile.rs # ProfileConfig + readonly_profile()
│ │ └── types.rs # ProviderType (Remote/Local)
│ └── onboarding/ # Interactive setup wizard + save_config.rs
tui/ # TUI crate (ratatui-based)
├── src/
│ ├── app/events.rs # InputEvent / OutputEvent enums
│ └── services/handlers/ # Event handlers (tool, shell, etc.)
libs/
├── ai/ # LLM provider abstraction (`stakai`)
│ └── src/providers/
│ ├── anthropic/ # Anthropic API (convert, stream, types)
│ ├── openai/ # OpenAI-compatible API
│ └── gemini/ # Google Gemini API
├── api/ # API client + local processing (`stakpak-api`)
│ └── src/local/
│ ├── context_managers/ # Message history reduction strategies
│ │ ├── task_board_context_manager.rs # Preserves individual messages
│ │ ├── simple_context_manager.rs # Flattens history to text
│ │ └── file_scratchpad_context_manager.rs
│ └── hooks/ # Context hooks (scratchpad, task board)
├── shared/ # Shared types (`stakpak-shared`)
│ └── src/models/
│ ├── llm.rs # LLMMessage, LLMMessageContent, provider configs
│ ├── stakai_adapter.rs # ChatMessage → StakAI Message conversion
│ └── integrations/
│ ├── openai.rs # ChatMessage, ToolCall, Role types
│ └── mcp.rs # MCP tool call result handling
└── mcp/ # MCP client/server/proxy crates
├── client/
├── server/
└── proxy/
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 335 lines · 3,669 tokens per session scan A 376b61864d03
agent AGENTS.md is an instructions file published in the GitHub repository stakpak/agent (1,855 stars, last pushed 4mo ago), licensed Apache-2.0. It adds 3,669 tokens to every session, about $0.0147 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
agent AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| agent AGENTS.mdstakpak/agent | Instructions file | 1.9k | 4mo ago | Apache-2.0 | A | 3,669 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |