agentic-rd-skill AGENTS.md

Repository instructions for a portable AI skill and its Node.js command-line workflow. They define which files are authoritative, how the workflow works, and which project rules must remain true.

In plain words
What is it for?
Use them when modifying the agentic-rd-skill package, its workflow CLI, documentation, templates, tests, or repository-wide instructions.
Why use it?
They help contributors keep documentation, executable behavior, templates, and tests in agreement. They also clarify which files are product source and which are only local working artifacts.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/thestreamcode/agentic-rd-skill/agents-md
Clone the repo
git clone --depth 1 https://github.com/TheStreamCode/agentic-rd-skill

Made for: Codex, OpenCode.

Per session 1,439 This file is loaded in full into every session.
When invoked 1,439 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01439 $0.01439
Opus 5 $0.00720 $0.00720
Sonnet 5 $0.00288 $0.00288
Haiku 4.5 $0.00144 $0.00144

Measured yesterday against content hash 41a50060a70c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

agentic-rd-skill AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 91 lines

How it starts

The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repository Instructions

These instructions apply to the entire repository. Preserve narrower instructions if a future subdirectory adds its own AGENTS.md.

Purpose And Sources Of Truth

This repository publishes a portable Agent Skill plus a dependency-free Node.js workflow CLI.

  • skills/agentic-rd-skill/ is the installable package.
  • skills/agentic-rd-skill/SKILL.md is the concise activation and operating contract.
  • skills/agentic-rd-skill/references/workflow.md is the detailed workflow/state reference.
  • skills/agentic-rd-skill/scripts/rd.mjs is the executable state-machine implementation.
  • skills/agentic-rd-skill/assets/ contains the canonical artifact templates.
  • README.md documents public behavior and installation.
  • evals/ contains dated evidence. Historical snapshots must not be presented as current measurements.
  • project-brief.md and work/ are ignored local dogfood artifacts, not tracked product source.

When documentation and runtime behavior disagree, verify the CLI and tests, then update every affected source of truth in the same change.

Repository Invariants

  • Support Node.js 20 or newer and keep the installable skill free of runtime dependencies.
  • Keep portable frontmatter provider-neutral; never add host-specific allowed-tools or implicit external authority.
  • Preserve phase order: setup, evidence, plan, execution, results, cross-review, stage gate, final.
  • New runs use workflow contract 1.1. Existing workflow 1.0 state remains readable; v0.3 workspaces are preserved and rejected rather than migrated.
  • Setup remains in_progress until the filled brief and run log pass their artifact contracts.
  • State-mutating commands validate the current global state and the candidate next state before writing. The documented stale-final recovery is the only scoped repair exception.
  • validate distinguishes valid-incomplete, valid-complete, and invalid state. Structural validation is not semantic assurance.
  • Stage-gate approval requires at least 8/10, no zero dimension, and zero blockers.
  • A requested revision must retain its ID and be resolved by an upstream artifact change or an explicit no-change disposition.
  • package.json is the single source of truth for the release version. SKILL.md metadata, CITATION.cff, the README version badge, and a dated CHANGELOG.md release section must match it; npm run validate fails on any partial bump.
  • Do not hardcode the release version anywhere else. Scripts that need it must read it from package.json or the shipped SKILL.md frontmatter.
  • The CLI is single-writer. Do not introduce concurrent state mutation without a designed locking/generation protocol and cross-platform tests.
  • Preserve atomic state replacement, managed-path containment, symlink rejection, non-overwrite behavior, and explicit exit classes.
  • Preflight the complete initialization layout before the first scaffold write; a late path conflict must leave earlier missing files untouched.
  • Keep currentPhase equal to the latest non-pending phase and keep stage-gate score, dimensions, blockers, and decision metadata consistent with the gate status.
  • Treat profile/option names as exact whitelist members rather than inherited object keys, and keep paid-tool, credentialed-system, and external-write state budgets fail-closed.
  • Never convert skipped or zero-execution host checks into a pass.

Read the full file on GitHub · 91 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 91 lines · 1,439 tokens per session scan A 41a50060a70c

Subscribe to this mod's changes

agentic-rd-skill AGENTS.md is an instructions file published in the GitHub repository TheStreamCode/agentic-rd-skill (1 stars, last pushed 12d ago), licensed MIT. It adds 1,439 tokens to every session, about $0.0072 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

takt AGENTS.md

Instructions for nrslib/takt, covering repository guidelines, project structure & module organization, build, test, and development commands, coding style & naming conventions and testing guidelines.

nrslib/takt · 977 tokens

open-tag CLAUDE.md

Instructions for fancyboi999/open-tag, a project described as: Open-source, self-hostable alternative to Claude Tag — a Slack-style workspace where your team and its AI agents (Claude Code, Codex, GitHub Copilot, and more) work as teammates in channels, threads, DMs, and shared tasks. Your data stays on your machines.

fancyboi999/open-tag · 106 tokens

dos-kernel AGENTS.md

Instructions for anthony-chaudhary/dos-kernel, covering what dos is (the 30-second version), run it yourself first — the 60-second proof, when the user asks you about dos (the consumer moves), build, test, and check your work and the layout in one screen.

anthony-chaudhary/dos-kernel · 4,444 tokens

dos-kernel GEMINI.md

Instructions for anthony-chaudhary/dos-kernel, covering dos — the part that doesn't believe the agents, the rule, why this matters and setup.

anthony-chaudhary/dos-kernel · 606 tokens

PuPu CLAUDE.md

Instructions for haoxiang-xu/PuPu, covering gitnexus — code intelligence, always do, never do, resources and cli.

haoxiang-xu/PuPu · 1,264 tokens

open-tag AGENTS.md

Instructions for fancyboi999/open-tag, covering open-tag — guide for ai coding agents, this file is a map, not a manual, conventions, parallel development (worktrees) and isolated dev e2e (on demand).

fancyboi999/open-tag · 3,771 tokens