shellshare AGENTS.md

Instructions for using shellshare from scripts and AI agents. Shellshare broadcasts a live terminal session to a web link that people can view in read-only mode.

In plain words
What is it for?
Starting a terminal broadcast, extracting its URL programmatically, reading live output, and checking whether the shared command ended successfully.
Why use it?
It explains how to install the tool, read its machine-readable JSON events, and handle the shared-session link and process status.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/vitorbaptista/shellshare/agents-md
Clone the repo
git clone --depth 1 https://github.com/vitorbaptista/shellshare

Made for: Codex, OpenCode.

Per session 2,182 This file is loaded in full into every session.
When invoked 2,182 The same file — it is already loaded in full.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02182 $0.02182
Opus 5 $0.01091 $0.01091
Sonnet 5 $0.00436 $0.00436
Haiku 4.5 $0.00218 $0.00218

Measured 2d ago against content hash 3d5c3fd13419, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

shellshare AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -sLo shellshare https://get.shellshare.net/ && chmod +x shellshare # static binary (auto-detects OS)
AGENTS.md · 186 lines

How it starts

The opening of the file, as written. The whole thing — 186 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Using shellshare from scripts and AI agents

Contributing to this repository? See CLAUDE.md for build, lint, and test instructions. This file documents how to use shellshare programmatically — e.g. an AI agent sharing a live terminal with its user.

shellshare broadcasts a terminal session to a web link in one command. No signup, no configuration: run it, parse the link, hand the link to a human. Viewers see the terminal live in their browser, read-only.

Install

npx shellshare --help                    # no install (Node.js)
curl -sLo shellshare https://get.shellshare.net/ && chmod +x shellshare   # static binary (auto-detects OS)

Binaries exist for Linux x64/arm64, macOS x64/arm64, and Windows x64 (https://get.shellshare.net/?os=linux|linux-arm|mac|mac-arm|windows).

The machine-readable contract: --json

With --json, shellshare prints newline-delimited JSON events to stdout:

  • First line, before any terminal output: {"event":"sharing","room":"<room>","server":"https://shellshare.net","url":"https://shellshare.net/r/<room>"}
  • Last line: {"event":"end","exit_code":0}

Errors are printed to stderr as ERROR: ... and the process exits non-zero. Parse the url field from the first stdout line — that is the link to give to your user.

Recipes

Share one command and exit when it finishes (the usual agent case — e.g. let the user watch a long build, test run, or migration live):

shellshare exec --json -- npm test

exec runs the command in a PTY, streams it live, and exits with the command's exit code (a signal-killed command reports exit code 1). Note the -- separator before the command.

This works for commands that finish immediately, too — dmesg | shellshare --json leaves a working link after dmesg exits. You do not need to hold the process open with a sleep.

Stream a log or pipe (no PTY; a non-TTY stdin auto-detects this and reads stdin until EOF):

tail -f build.log | shellshare --json

Read the full file on GitHub · 186 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 186 lines · 2,182 tokens per session scan A 3d5c3fd13419

Subscribe to this mod's changes

shellshare AGENTS.md is an instructions file published in the GitHub repository vitorbaptista/shellshare (226 stars, last pushed 8d ago), licensed Apache-2.0. It adds 2,182 tokens to every session, about $0.0109 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.