work-skill: Instructions file for Codex

AGENTS.md

work-skill AGENTS.md is an instructions file for Codex, OpenCode from xcaeser/work-skill. It costs 1,006 tokens per session, scanned A, original, MIT.

Project instructions for xcaeser/work-skill, including its quality standards and rules for keeping each focused work skill self-contained.

In plain words
What is it for?
Use it when editing work-skill or any nested work skill, especially when deciding whether a generated idea solves a real problem and is ready to keep.
Why use it?
It explains the checks and design principles contributors must follow before changing the project or its skills.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: $skill-name invocation.

This is xcaeser/work-skill's own configuration. It tells Codex and OpenCode how to work on work-skill itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything work-skill configures →

Reuse

Borrowing it

Nothing to install: this file belongs to xcaeser/work-skill. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/xcaeser/work-skill/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/xcaeser/work-skill

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for work-skill AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/xcaeser/work-skill/agents-md/github.svg)](https://agentmods.dev/instructions/xcaeser/work-skill/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/xcaeser/work-skill/agents-md"><img src="https://agentmods.dev/badge/instructions/xcaeser/work-skill/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for work-skill AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/xcaeser/work-skill/agents-md"><img src="https://agentmods.dev/badge/instructions/xcaeser/work-skill/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,006 This file is loaded in full into every session.
When invoked 1,006 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01006 $0.01006
Opus 5.5 $0.00402 $0.00402
Sonnet 5.5 $0.00201 $0.00201
Haiku 4.5 $0.00101 $0.00101

Measured 2mo ago against content hash 738b2e7d32c7, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

work-skill AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 31 lines

How it starts

The opening of the file, as written. The whole thing — 31 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Work project rules

Read skills/QUALITY.md before changing this project or any nested Work skill. Treat it as the project's quality bar.

  • Keep every focused skill under skills/work-* self-contained. Do not reference ../QUALITY.md, sibling skills, or files outside its own directory; focused skills may be installed independently.

  • Quality software must not break at real boundaries, must not demand attention without a reason, must know its limits, fix failures quickly, and respect human attention and authorship.

  • Practice empathy, focus, and impute: understand the user's real context, eliminate unimportant opportunities, and present every surface and handoff with care that truthfully reflects the quality underneath.

  • Treat taste as trained judgment: study references, use enduring fundamentals, invite critique, balance usability with character, and explain qualitative decisions beyond personal preference or current trends.

  • Restore deliberate friction where cheap implementation would bypass judgment: require a real problem, user, validation question, and kill or selection criterion before turning generated options into product surface.

  • Never preserve backwards compatibility. Prefer a clean break, update all in-scope consumers together, and remove obsolete aliases, adapters, wrappers, flags, and migration shims. If an external contract cannot be removed, stop and escalate; do not invent an internal compatibility layer.

  • Choose the simplest implementation that fully meets the current requirements. Avoid speculative abstractions, configuration, and indirection.

  • Grow the system in layers. Start from the smallest version that works end to end, and add each new capability on top of a product that already works. Never trade a working product for unfinished complexity.

  • Keep components modular and concerns clearly separated.

  • Prefer established, well-maintained libraries when they reduce overall complexity or improve reliability. Do not reimplement common functionality without a clear reason.

  • Lean on the dependencies already in the project before writing your own implementation or adding packages. Do not assume a library lacks a capability without checking its documentation and types.

  • Make architectural decisions for the long term. Do not accept a stopgap that only works for now and is meant to be replaced later.

  • Keep user data, recoverability, security, and truthful failure behavior safe; those are not compatibility shims.

  • Keep agents bounded executors. The parent owns taste, decisions, integration, user-facing copy, and proof.

  • Before work begins, state the exact goal, source of truth, acceptance checks, boundaries, and what does not count. Treat concrete artifacts and validation evidence as the only completion proof.

  • Make plans self-contained for a lower-capability executor with no hidden context: resolve judgment-heavy choices and name exact files, symbols, ordered changes, invariants, failure cases, validation commands, and expected evidence.

  • For test work, inspect implementation, existing tests, public APIs, and actual user flows before writing anything. Add only deterministic tests for observed behavior, provide the four-line test plan first, and report tests deliberately omitted and any real bug discovered.

  • For parallel investigation, diversify by approach family, preserve independent hypotheses early, track evidence and blockers, and challenge exact contracts and failure boundaries. Reopen blocked routes only for a materially new mechanism, within the user's scope and token budget.

  • Once an agent starts, let it run until it reports complete, blocked, or needs user input. Never kill it just because a poll, tool call, or arbitrary wall-clock interval elapsed; interrupt only for explicit cancellation/goal change, safety, duplicate ownership, an approved resource limit, or clear repeated no-progress evidence, and record the reason.

  • Treat discovery validation as structural only. After changing workflow behavior, forward-test the affected skill with a realistic request in a disposable task and inspect its raw launch, goal, handoff, and read-only boundaries; routing or goal-lifecycle changes require representative $work, $work-plan, and $work-checklist smoke tests before release.

  • Use Work / 2. Ideate for an interactive, question-by-question sparring session; it does not spawn agents or edit files, and it must end in a sharper decision or test rather than an idea dump.

  • Use Work / 4. Test for direct meaningful-test implementation: inspect real behavior first, publish the four-line test plan, add only justified deterministic tests, and optimize for confidence rather than coverage; it does not spawn agents.

  • Use Work / 5. Concern for a compact, read-only implementation sanity check; it reports only evidence-backed concerns and unknowns, never edits or a full fix plan.

  • Use Work / 6. Checklist to capture an ideated direction, plan, requirements, or concerns as accountable items. Capture mode does not create a goal or edit; Execute mode registers one parent-owned goal and works every item without agents.

  • Use Work / 9. Quality when the standard should be passed into a conversation; it never spawns agents or edits files.

Read the full file on GitHub · 31 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 31 lines · 1,006 tokens per session scan A 738b2e7d32c7

Subscribe to this mod's changes

work-skill AGENTS.md is an instructions file published in the GitHub repository xcaeser/work-skill (2 stars, last pushed 2mo ago), licensed MIT. It adds 1,006 tokens to every session, about $0.0040 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,461 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,750 tokens

deno copilot-instructions.md

Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.

denoland/deno · 3,077 tokens