What is agent-workflow AGENTS.md?

Repository instructions for AI coding agents, including which guidance files to read and how to record an agent's contribution to a Git commit.

Use them when starting repository work, preparing commits involving an AI agent, or verifying co-author trailers before pushing.

They reduce the risk of ignoring project-specific instructions or using incorrect commit attribution. They also require checking the attribution before code is pushed.

How wangbinquan/agent-workflow configures Codex and OpenCode

Reuse

Borrowing it

Nothing to install: this file belongs to wangbinquan/agent-workflow. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/wangbinquan/agent-workflow/main/AGENTS.md

Clone the repo

git clone --depth 1 https://github.com/wangbinquan/agent-workflow

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/wangbinquan/agent-workflow/agents-md/github.svg)](https://agentmods.dev/instructions/wangbinquan/agent-workflow/agents-md)

Your own site

<a href="https://agentmods.dev/instructions/wangbinquan/agent-workflow/agents-md"><img src="https://agentmods.dev/badge/instructions/wangbinquan/agent-workflow/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/wangbinquan/agent-workflow/agents-md"><img src="https://agentmods.dev/badge/instructions/wangbinquan/agent-workflow/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 919 This file is loaded in full into every session.

When invoked 919 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00919	$0.00919
Opus 5.5	$0.00368	$0.00368
Sonnet 5.5	$0.00184	$0.00184
Haiku 4.5	$0.00092	$0.00092

Measured 24d ago against content hash 62bd4b32334b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

agent-workflow AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 24d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 24 lines

How it starts

The opening of the file, as written. The whole thing — 24 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repository agent instructions

Before starting work, read CLAUDE.md and STATE.md, then follow the current repository guidance in those files.

RFC 开发与多 session 协作硬规则（用户 2026-10-12 明令）

以下规则适用于本仓所有模型与 session，必须执行，不得自行豁免；与仓内旧流程、历史 RFC、STATE.md 或经验文档冲突时，以本节为准。

先完成全部开发和测试用例编写，再集中进行功能验证。 按已批准 RFC 的完整需求清单完成全部生产实现、接线和测试用例，再进入测试执行、功能验收、端到端验证和实现门。设计阶段的需求研究与设计门照常进行。不得自行把完整需求缩成若干小批次，写一部分代码就反复跑测试、门禁、浏览器验收或实现门，以验证循环代替剩余开发。开发期间只做必要的读码、语法与格式静态自查；不得借“自查”提前进行功能验证。集中验证发现本人缺陷后，修复并复验相关范围；候选内容未变时复用已有有效结果，不因 HEAD 前进或他人的无关提交反复重跑全量验证。
禁止发送跨 session 信息。 不得向其他独立 session / chat / thread 发消息、派活、催办、请求确认或协调发布；不得借助 send_message_to_thread、SendMessage、代理转发或其他渠道绕过。需要用户决定的阻塞只在当前会话说明，不能以“协调”为理由联系另一个 session。
允许合并提交他人的修改，禁止回退他人的代码。 提交上库允许完整保留并一起提交其他 session 的现有修改，包括共享文件中的修改及必要的关联文件；不得为剥离归属、制造干净树或让 CI 变绿，删除、覆盖、回滚、暂存移走或先撤掉再补回他人的代码。仍须明确本次提交的路径清单、检查共享 index，按路径提交；不能把未知暂存项或无关在制品不经核对一并扫入。提交说明与实际共同贡献者归属必须覆盖所提交的全部实质内容，交接时说明含有并发产出。
CI 红了先归因，再由责任 session 修复。 依据失败 job / step / 日志、确切提交差异与相关依赖判断根因；本 session 引入的问题由本 session 修复，其他 session 引入的问题保留失败证据并等待其自行修复，禁止代改、催办或回退对方代码。不能仅凭“由我 push”、失败文件名或 RFC 前缀判断责任；归属不明时在当前会话说明依据不足，不擅自认领。等待期间继续不受影响的工作，优先事件驱动等待，避免高频查询与重复验证；共享 CI 未绿时如实报告，不冒充整体通过。

Commit attribution

When an AI coding agent materially contributes to a commit, append a standard Git co-author trailer using the actual agent or model name and its provider's noreply email: Co-Authored-By: <agent-or-model-name> <provider-noreply-email>
For Claude Fable 5, use exactly: Co-Authored-By: Claude Fable 5 <[email protected]>
Replace every placeholder with the contributing session's real values. Do not hard-code one vendor, product, model, or email for all agents, and do not attribute a commit to an agent that did not materially contribute.
If multiple agents materially contributed to one commit, add one non-duplicated Co-Authored-By trailer per contributing agent.
Do not add an agent co-author trailer to a human-only commit.
After committing and before pushing, verify the trailer with git show -s --format=%B HEAD. If a required trailer is missing, fix it before push; do not rewrite already-pushed shared history solely to add or change attribution.

Read the full file on GitHub · 24 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

24d ago Changed · +9 lines · +656 tokens per session 62bd4b32334b
2mo ago First seen · 15 lines · 263 tokens per session scan A c30cebe7866b

Subscribe to this mod's changes

agent-workflow AGENTS.md is an instructions file published in the GitHub repository wangbinquan/agent-workflow (58 stars, last pushed today), licensed Apache-2.0. It adds 919 tokens to every session, about $0.0037 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

agent-workflow AGENTS.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
agent-workflow AGENTS.mdwangbinquan/agent-workflow	Instructions file	58	today	Apache-2.0	A	919	Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

agent-workflow: Instructions file for Codex