Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/zandereins/schliff/agents-mdgit clone --depth 1 https://github.com/Zandereins/schliffWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/zandereins/schliff/agents-md)<a href="https://agentmods.dev/instructions/zandereins/schliff/agents-md"><img src="https://agentmods.dev/badge/instructions/zandereins/schliff/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01073 | $0.01073 |
| Opus 5 | $0.00536 | $0.00536 |
| Sonnet 5 | $0.00215 | $0.00215 |
| Haiku 4.5 | $0.00107 | $0.00107 |
Grade A, and why
schliff AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Schliff — agent instructions
Deterministic quality scorer for AI instruction files (Python, stdlib-only core,
zero runtime dependencies). The engine lives in skills/schliff/scripts/; the
web playground in playground/; the GitHub Action in action.yml.
Scope & composition
Use when you need to score or improve a SKILL.md, AGENTS.md, CLAUDE.md, or
.cursorrules. Do not use it on a whole codebase — it grades one instruction
file, not a repo. For a brand-new skill, use skill-creator instead; schliff improves
existing files, it doesn't scaffold new ones.
- Input: one instruction-file path. Output: a deterministic per-dimension
score plus a composite (text or
--json); scoring writes nothing. - Idempotent, no side effects — same input, same score, safe to re-run.
- Requires Python >= 3.10, no other runtime dependency; supported versions 3.10–3.13.
Setup
pip install -e .
pip install pytest ruff
Optional extras: pip install -e ".[judge]" (LLM-judge smoke-test only — core
scoring must stay zero-dependency).
Build
pip install build
python -m build
Pure-Python wheel; nothing to compile.
Test
make test-unit # pytest unit suite — run this before every commit
make lint # ruff check skills/schliff/scripts/
make test-all # unit + integration + self + proof suites
A single scorer test file runs fast: python3 -m pytest skills/schliff/tests/unit/test_operational_coverage.py -q.
Example: verify a scorer change end-to-end (score a real file with your edit):
python3 skills/schliff/scripts/cli.py score AGENTS.md --json
Expected output: JSON with composite_score, per-dimension scores, and
format: agents.md. If operational_coverage is missing, your registry
wiring is broken — check SCORER_REGISTRY["agents.md"].
Code style
- Ruff is the authority (
pyproject.toml: E, F, W, I; line length 120). Runmake lintbefore pushing — it gates Python and markdown (.markdownlint-cli2.jsonc), exactly as CI does. - Core engine code (
skills/schliff/scripts/) is stdlib-only — never add a runtime dependency there, because "pip install schliff, zero deps" is the product promise CI and the README both make. - Scorers must be deterministic: no
time,random,os.environreads, or network in any scoring path, because same-input-same-score is the core guarantee. Tests pin this (test_purity_no_forbidden_imports). - Prefer explicit error handling; no silent
except: passin scoring code.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 80 lines · 1,073 tokens per session scan A 13d8ceec7d2a
schliff AGENTS.md is an instructions file published in the GitHub repository Zandereins/schliff (15 stars, last pushed yesterday), licensed MIT. It adds 1,073 tokens to every session, about $0.0054 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
megalinter CLAUDE.md
Claude Code instructions for oxsecurity/megalinter, covering claude.md, project overview, development setup, shell commands — use rtk and key commands.
cocoindex AGENTS.md
AGENTS.md instructions for cocoindex-io/cocoindex, covering agents.md, build and test commands, building, testing and code formatting and linting.
apm python.instructions.md
Python development guidelines.
foundry-local python-cffi-pointer-types.instructions.md
Use when working on the Python SDK's native bindings (cffi), especially when defining new Item subclasses, working with flItemQueue, or extending Request/Session methods that pass native handles.
streamlit e2e_playwright.instructions.md
Instructions for streamlit/streamlit, covering streamlit e2e tests, test structure, key fixtures and utilities, external test mode and url handling (no localhost hardcoding).
airflow CLAUDE.md
Claude Code instructions for apache/airflow, a project described as: Apache Airflow - A platform to programmatically author, schedule, and monitor workflows.