machine-bridge-mcp: Instructions file for Codex

AGENTS.md

machine-bridge-mcp AGENTS.md is an instructions file for Codex, OpenCode from YuLeiFuYun/machine-bridge-mcp. It costs 2,041 tokens per session, scanned B, original, MIT.

A set of repository instructions for automating work in the YuLeiFuYun/machine-bridge-mcp project, including rules for choosing tools and handling GitHub tasks.

In plain words
What is it for?
Use it when working in that repository to check required documents, choose approved tools, limit the work's scope, and use local Git or GitHub commands.
Why use it?
It keeps work within the repository's required boundaries, especially by preventing hosted GitHub tools from being used when local tools are required.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md.

This is YuLeiFuYun/machine-bridge-mcp's own configuration. It tells Codex and OpenCode how to work on machine-bridge-mcp itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything machine-bridge-mcp configures →

Reuse

Borrowing it

Nothing to install: this file belongs to YuLeiFuYun/machine-bridge-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/YuLeiFuYun/machine-bridge-mcp/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/YuLeiFuYun/machine-bridge-mcp

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for machine-bridge-mcp AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/yuleifuyun/machine-bridge-mcp/agents-md/github.svg)](https://agentmods.dev/instructions/yuleifuyun/machine-bridge-mcp/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/yuleifuyun/machine-bridge-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/yuleifuyun/machine-bridge-mcp/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for machine-bridge-mcp AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/yuleifuyun/machine-bridge-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/yuleifuyun/machine-bridge-mcp/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 2,041 This file is loaded in full into every session.
When invoked 2,041 The same file — it is already loaded in full.
Security scan B 2 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.02041 $0.02041
Opus 5.5 $0.00816 $0.00816
Sonnet 5.5 $0.00408 $0.00408
Haiku 4.5 $0.00204 $0.00204

Measured 14d ago against content hash 1b6341500cf5, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

machine-bridge-mcp AGENTS.md scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

When diagnosing local incidents (e.g. 502 Bad Gateway, port conflicts, TLS or service failures), always prefer narrow read-only inspection (e.g. `lsof -nP -iTCP:<port> -sTCP:LISTEN`, reading scoped service logs or effect

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

When diagnosing local incidents (e.g. 502 Bad Gateway, port conflicts, TLS or service failures), always prefer narrow read-only inspection (e.g. `lsof -nP -iTCP:<port> -sTCP:LISTEN`, reading scoped service logs or effect
AGENTS.md · 60 lines

How it starts

The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repository automation contract

Read ENGINEERING, PROJECT_STANDARDS, and CONTRIBUTING before changing code. They define architecture, security, validation and review obligations; RELEASING is the authoritative release procedure. Preserve unrelated work and existing safety boundaries.

Tool-selection hard gate

Do not call, discover, list, load, or invoke a hosted GitHub connector, ChatGPT GitHub plugin, browser-side GitHub integration or equivalent remote control plane for this repository. This gate applies before connector/tool discovery. Use only local git, gh, and gh api through Machine Bridge. Availability of a hosted connector is not a fallback. A violation must be treated as a process defect: inspect any remote effect through local gh, record the correction and resume locally.

Checkout identity and coding scope

Verify worktrees, branch, HEAD, package version and tool-schema generation before describing a checkout as current main, online or a candidate. Resolve a named prerelease first with node <any-worktree-of-this-repository>/scripts/resolve-versioned-worktree.mjs <any-worktree-of-this-repository> <beta.N>; accept exactly one status=resolved with fallback_used=false. Directory names and dirty package versions are insufficient routing evidence. Preserve historical dirty worktrees; reconcile missing or ambiguous identities. Compare live server_info and the complete host catalog when runtime/schema identity matters.

Source, tests, docs, package metadata, branches, commits, local verification, candidate preparation/activation, Worker and login-daemon replacement, the bounded synthetic OAuth canary, acceptance, guarded push/PR/merge, tags and GitHub Releases are standing-authorized when required by the task and integrity gates pass. Do not add conversational stop points. Default full policy, strict schemas, request-scoped MCP 2026-07-28, shared authority checks, bounded protected file reads, unknown-outcome settlement and privacy-bounded logs remain mandatory. Do not add obsolete protocol compatibility, arbitrary public evaluation tools, speculative security changes, dependency cycles or mechanical file splitting.

Read the full file on GitHub · 60 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 14d ago Changed · +6 lines · +172 tokens per session scan A → B 1b6341500cf5
  2. 15d ago Changed · -107 lines · -3,994 tokens per session ad9db6c0c8a3
  3. 1mo ago Changed · +3 tokens per session 4337a52c8fd3
  4. 2mo ago Changed · +409 tokens per session 1b54bfb609b0
  5. 2mo ago Changed · +1 lines · +236 tokens per session de000bc9d4b5
  6. 2mo ago First seen · 160 lines · 5,215 tokens per session scan A 84c04555a931

Subscribe to this mod's changes

machine-bridge-mcp AGENTS.md is an instructions file published in the GitHub repository YuLeiFuYun/machine-bridge-mcp (1 stars, last pushed 4d ago), licensed MIT. It adds 2,041 tokens to every session, about $0.0082 per session on Opus 5.5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

machine-bridge-mcp AGENTS.md compared with instructions from other repositories

machine-bridge-mcp AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
machine-bridge-mcp AGENTS.mdYuLeiFuYun/machine-bridge-mcpInstructions file14d agoMITB2,041Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode