unbuilt.app AGENTS.md

unbuilt.app AGENTS.md is an instructions file for Codex, OpenCode from yavorsky/unbuilt.app. It costs 1,091 tokens per session, scanned A, original, MIT.

Project instructions for unbuilt.app, a website technology detector. The tool visits a live page, collects resources such as scripts and stylesheets, and matches them against detection patterns.

In plain words
What is it for?
Use them when adding or changing technology-detection patterns, feature categories, resource tracking, or analyzer behavior.
Why use it?
They explain the monorepo, a repository containing multiple related projects, and the two-pass detection process so new technology checks fit the existing design.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md.

Not installable on its own: it reads a path above its own folder, which only exists inside its repository. The line is import { Meta } from '../../../types/meta.js';.

Install

Getting it into your agent

There is no command for this one: it runs only inside a plugin, and the catalogue could not identify which plugin ships it. The source is linked below.

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for unbuilt.app AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/yavorsky/unbuilt.app/agents-md.svg)](https://agentmods.dev/instructions/yavorsky/unbuilt.app/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/yavorsky/unbuilt.app/agents-md"><img src="https://agentmods.dev/badge/instructions/yavorsky/unbuilt.app/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 1,091 This file is loaded in full into every session.
When invoked 1,091 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01091 $0.01091
Opus 5 $0.00545 $0.00545
Sonnet 5 $0.00218 $0.00218
Haiku 4.5 $0.00109 $0.00109

Measured 6d ago against content hash 777cc52bd12e, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

unbuilt.app AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 130 lines

How it starts

The opening of the file, as written. The whole thing — 130 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — unbuilt.app

Tech stack detection for websites via Playwright + pattern matching.

Project Structure

Monorepo (yarn workspaces + turborepo):

apps/cli/          — CLI tool (`unbuilt <url>`)
apps/web/          — Next.js web app (unbuilt.app)
packages/analyzer/ — Orchestrates detection: navigates page, runs all detectors, two-pass analysis
packages/features/ — Detection categories & patterns (this is where you add new detections)
packages/helpers/  — Shared utilities
packages/resources/— Resource tracking (scripts, stylesheets, etc.)

How Detection Works

  1. Resources are collected from a live page (scripts, stylesheets, documents, headers, filenames)
  2. Patterns match against those resources using regex and browser checks
  3. Two-pass analysis: first pass detects everything independently, second pass runs dependencies checks so categories can reference each other's results
  4. Each category returns: { name, confidence, detectedFeatures, secondaryMatches }

Pattern Interface

interface Pattern {
  score: number;           // Weight (0-1). Higher = stronger signal
  name: string;            // Identifier for this pattern
  scripts?: RegExp[];      // Match against JS bundle contents
  stylesheets?: RegExp[];  // Match against CSS contents
  documents?: RegExp[];    // Match against HTML document
  headers?: Record<string, RegExp>; // Match against HTTP headers
  filenames?: RegExp[];    // Match against resource URLs
  browser?: (page, browser) => boolean | Promise<boolean>; // Runtime check
  dependencies?: (analysis) => boolean; // Cross-category dependency check (2nd pass)
}

Key Types

  • Patternpackages/features/src/types/pattern.ts
  • FeatureResultpackages/features/src/types/feature.ts
  • CalculationResultpackages/features/src/types/feature.ts
  • AnalysisFeaturespackages/features/src/types/analysis.ts
  • AnalyzeResultpackages/analyzer/src/types.ts

Adding a Pattern to an Existing Category

Read the full file on GitHub · 130 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 130 lines · 1,091 tokens per session scan A 777cc52bd12e

Subscribe to this mod's changes

unbuilt.app AGENTS.md is an instructions file published in the GitHub repository yavorsky/unbuilt.app (92 stars, last pushed 16d ago), licensed MIT. It adds 1,091 tokens to every session, about $0.0055 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.