Borrowing it
Nothing to install: this file belongs to wildcat-finance/skills. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/wildcat-finance/skills/main/AGENTS.mdgit clone --depth 1 https://github.com/wildcat-finance/skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/wildcat-finance/skills/agents-md)<a href="https://agentmods.dev/instructions/wildcat-finance/skills/agents-md"><img src="https://agentmods.dev/badge/instructions/wildcat-finance/skills/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/wildcat-finance/skills/agents-md"><img src="https://agentmods.dev/badge/instructions/wildcat-finance/skills/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.05982 | $0.05982 |
| Opus 5.5 | $0.02393 | $0.02393 |
| Sonnet 5.5 | $0.01196 | $0.01196 |
| Haiku 4.5 | $0.00598 | $0.00598 |
Grade A, and why
skills AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 480 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Instructions for local agents
This repository is the source distribution for Wildcat Labs Skills, the
Shoggoth. A person can begin with README.md; an agent begins here.
The safe loading path is short:
- read the collective identity and shared Promise Machine contract;
- route the request through
.agents/skills/promise-machine/SKILL.md; - read the selected plugin's
AGENTS.md; and - read the one canonical
SKILL.mdthat contract selects.
Files present in context are not automatically active skills. A router, manifest, worker brief, or generated installation copy also does not create a general capability or permission.
Collective identity
Before interpreting any reference to Shoggoth, including a shortened, altered, or affectionate form of the name, or resolving a user's collective form of address from available GitHub credentials, read the shared Shoggoth collective identity. That language affects how people address the agents and skills. It does not activate a skill, grant authority, or weaken the Promise Machine and target-repository instructions.
Promise Machine contract
Before selecting or running a skill, read the suite-wide
Promise Machine contract. Its identity is
promise-machine/v1. Each result authorises only the transition declared by
its canonical skill; missing, stale or insufficient evidence blocks that
dependent transition while leaving inspection, repair, rerun and safe exit
available.
The root law is authored once. Plugin-local PROMISE_MACHINE.md files are
generated installation copies and must remain byte-identical to it.
Marketplace boundaries
The 18 plugins form one marketplace, not competing descriptions of the same job. Alexandria preserves lending inputs; Tabularium interprets preserved venue records; Probitas assembles a counterparty dossier. Lazarus preserves the finite historical Ethereum state and exact RPC traffic a test needs, while Ariadne binds a released artefact digest to its evidence. Berean holds a protocol agent's recorded answers to pinned corpora and preserved chain reads; it neither chunks documents nor preserves chain state itself. Pandects supplies reviewed credit laws, Hermes measures a single gas-optimisation class named by a rule from its pinned corpus, Hexaemeron controls a receipted delivery loop and holds each of its phases to a named skill, while Lemma stops after producing source-linked chunks. Homologia compares one pinned contract computation with one pinned off-chain mirror over declared vectors and preserves each divergence as a specimen, where Pandects supplies the economic laws and Lazarus the proved chain-side answers such a comparison consumes as evidence. Horos decides what an agent does not read. Janus checks what a contract hook may observe and change around a host action, where Pandects supplies the economic laws such a transition must preserve. Synkrisis owns the cross-run comparison boundary: it builds one checked cohort from declared run observations and infers only bounded relations between named events, and any operation whose runbook step has not landed refuses by name rather than guessing. All four current operations ship: cohort, diagnosis, rendering, and whole-path verification. Its findings stay bounded inferences: capture, redaction, receipt binding, causal triage, and every decision to act stay with their owners. Anamnesis keeps custody of audit findings and the changes that answered them: it admits a source only against an explicit rights basis, preserves the producer's bytes unchanged, and hands Elenchus a historical analogue and Synkrisis a checked cohort projection. The analogue is a hypothesis, so Elenchus still reproduces the present failure and still earns its own guard, and Synkrisis takes no custody of the source. Warden still produces a round's record; Anamnesis does not produce one. Dokimasia compiles a frontend's routes, actions and guards into a coverage denominator and reconciles a reviewed workbook against it, so every scoped item carries one disposition; it executes nothing, the harness that runs a release belongs to the application's own repository, and where Anamnesis keeps custody of findings and their remedies, Dokimasia records only which behaviour has no reviewed oracle. Sapheneia shapes the agent's replies for AuDHD readers and has one bounded operation for durable audit, issue, and comment prose. The same operation governs every other record its agents write down, from a pull request to a repository document or a commit message, and cuts each to the shortest form its evidence allows. It does not change another skill's facts or gates. Brevitas controls the volume and structure of engineering prose after vocabulary and register passes. If a request crosses one of those boundaries, hand it to the named sibling rather than broadening the selected skill.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · -6 tokens per session 847d2f77dd05
- 1mo ago Changed · +8 lines · +111 tokens per session d096b0c200a0
- 1mo ago Changed · +2 lines · +45 tokens per session 315b18762cf3
- 1mo ago Changed · +29 lines · +435 tokens per session 617e62f8152f
- 1mo ago Changed · +3 lines · +49 tokens per session aa3c934df069
- 1mo ago Changed · +7 lines · +75 tokens per session c5ad11f5f44c
- 1mo ago Changed · +31 lines · +350 tokens per session c5e92ade9355
- 1mo ago Changed · +2 lines · +28 tokens per session f9ef0ec38497
- 1mo ago Changed · +7 lines · +118 tokens per session 331f46c79103
- 2mo ago First seen · 391 lines · 4,777 tokens per session scan A 4a4d2db22e4b
skills AGENTS.md is an instructions file published in the GitHub repository wildcat-finance/skills (13 stars, last pushed yesterday), licensed Apache-2.0. It adds 5,982 tokens to every session, about $0.0239 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
skills AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| skills AGENTS.mdwildcat-finance/skills | Instructions file | 13 | yesterday | Apache-2.0 | A | 5,982 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | yesterday | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |