xiaobai-skills: Instructions file for Codex

AGENTS.md

xiaobai-skills AGENTS.md is an instructions file for Codex, OpenCode from Tyuts/xiaobai-skills. It costs 561 tokens per session, scanned A, original, MIT.

Project instructions for the Tyuts/xiaobai-skills repository, which builds and publishes beginner-friendly starter skills for coding agents.

In plain words
What is it for?
Use them when editing the repository’s skills, documentation, installer, assets, or project planning files.
Why use it?
They explain the repository layout, writing conventions, safe defaults, and project-specific restrictions that are easy to miss.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions Codex.

This is Tyuts/xiaobai-skills's own configuration. It tells Codex and OpenCode how to work on xiaobai-skills itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything xiaobai-skills configures →

Reuse

Borrowing it

Nothing to install: this file belongs to Tyuts/xiaobai-skills. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/Tyuts/xiaobai-skills/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/Tyuts/xiaobai-skills

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for xiaobai-skills AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/tyuts/xiaobai-skills/agents-md/github.svg)](https://agentmods.dev/instructions/tyuts/xiaobai-skills/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/tyuts/xiaobai-skills/agents-md"><img src="https://agentmods.dev/badge/instructions/tyuts/xiaobai-skills/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for xiaobai-skills AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/tyuts/xiaobai-skills/agents-md"><img src="https://agentmods.dev/badge/instructions/tyuts/xiaobai-skills/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 561 This file is loaded in full into every session.
When invoked 561 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00561 $0.00561
Opus 5.5 $0.00224 $0.00224
Sonnet 5.5 $0.00112 $0.00112
Haiku 4.5 $0.00056 $0.00056

Measured 2mo ago against content hash 0ecafadd8e42, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

xiaobai-skills AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 59 lines

How it starts

The opening of the file, as written. The whole thing — 59 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Xiaobai Skills Agent Notes

This repository builds and publishes xiaobai-skills, a beginner-friendly starter pack and curator for Codex/agent skills.

Codebase Map

  • SKILL.md: the main Xiaobai skill loaded by Codex.
  • agents/openai.yaml: UI metadata for Codex skill listing.
  • scripts/install-xiaobai-skills.ps1: Windows installer and curator script.
  • docs/: design notes, promotion kit, and sponsor docs.
  • assets/: public assets such as the WeChat Pay QR code.
  • skills/self-improving-agent/: repo-local skill for project reflection.
  • README.md: public-facing GitHub project page.
  • ROADMAP.md: planned work.

Local Norms

  • Keep public repository docs mostly ASCII/English unless a file is explicitly meant to be Chinese; this avoids encoding issues in Windows PowerShell output.
  • Prefer conservative defaults: install useful skills, but move broad or risky alternatives to backup rather than global.
  • Do not enable superpowers globally unless the user explicitly asks; it is a backup framework due to possible compute/context overhead.
  • Treat WeChat Pay information as public sponsorship material only; never commit private payment credentials or personal secrets.

Guardrails

  • Never delete installed user skills during curation unless the user explicitly asks for deletion. Move to backup instead.
  • Do not re-enable all backup workflow frameworks at once.
  • Do not make claims about guaranteed star growth, sponsorship income, or viral performance.
  • Do not add fake stars, vote-buying instructions, or spammy promotion tactics.

Patterns & Gotchas

  • Git and GitHub CLI may be installed but unavailable in the current PowerShell PATH. Use full paths if needed:
    • C:\Program Files\Git\cmd\git.exe
    • C:\Program Files\GitHub CLI\gh.exe
  • GitHub Sponsors may not support receiving funds in every region; this project currently uses a custom WeChat Pay sponsor page.
  • If adding Chinese text, verify the committed file displays correctly in GitHub, not only in the local terminal.

Read the full file on GitHub · 59 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 59 lines · 561 tokens per session scan A 0ecafadd8e42

Subscribe to this mod's changes

xiaobai-skills AGENTS.md is an instructions file published in the GitHub repository Tyuts/xiaobai-skills (59 stars, last pushed 5mo ago), licensed MIT. It adds 561 tokens to every session, about $0.0022 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

xiaobai-skills AGENTS.md compared with instructions from other repositories

xiaobai-skills AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
xiaobai-skills AGENTS.mdTyuts/xiaobai-skillsInstructions file595mo agoMITA561Codex, OpenCode
vibe-coding-prompt-template backend.instructions.mdKhazP/vibe-coding-prompt-templateInstructions file3.2k1mo agoMITA139GitHub Copilot
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA9,719GitHub Copilot
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA5,516GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149ktodayMITA4,680Codex, OpenCode
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA3,093GitHub Copilot