← ~/library/ portable-workflows /
Add a dependency safely
Look it up, install with scripts off, commit the lockfile, scan it, rank findings by what is exploited; never call a package safe.
12 steps · 1317 words · Markdown format · Reviewed 2026-10-15
Tools: freeNodeOSV-Scannerran in Claude Coderan in Ollamaself-checkdone checkchecked 2026-10-15Any AIClaude CodeCodexCursorAiderClineOpenCodeOpenHandsOllamashellwebalways on14B+codingsafetybuildingshipping
What the pill colors mean
- paidfree alternativefree what running it costs you beyond the file: a paid service, a paid service with a free route (hover it), or nothing
- DockerAPI key what you must bring: software, an account or a key
- ran in (tool)self-checkdone check evidence: we ran it in that tool, or the file carries its own check
- checked 2026-10-12 the day it was last checked against official docs; not a run
- Any AI where it works; each brief page says where to put it
- shellchat only what your AI app must be able to do
- on demand when your AI reads it
- frontier the smallest model it was written for
- codingbuilding what it is for, and the build stage it fits
Checking access…
Get this brief
Checkout is temporarily unavailable. Read the skills sample or try the hooks sample. Free for any AI.
/library
Library
Start here for your next AI project.
$9 / month
- Pick any individual .mds and packs
- All 492 library briefs and new additions
- 2 video-to-.md conversions every month
- Early-member price. It is planned to move to $15 in one or two months; if you subscribe now your price stays $9 for as long as you stay subscribed.
- Cancel any time
/library-plus-video
Library + 5 videos
Turn your video backlog into next steps.
$15 / month
- Everything in Library
- 5 total video-to-.md conversions every month
- Reviewed and delivered to your email
- Cancel any time
/daily-video
Library + daily videos
Something new to build, every day.
$20 / month
- Everything in Library
- At least one video a day, more as capacity allows
- One video processed at a time
- Cancel any time
Put it here
Always on: put it where your tool reads instructions every session:
Any AI
Coding agent: save as AGENTS.md in the project root (read natively by Codex, Cursor, Copilot, Gemini CLI, Kiro, Devin, Cline, Roo, OpenHands, OpenCode, Goose, Amp, Zed, Warp, Junie, Factory and Jules; Claude Code when no CLAUDE.md exists; Aider with --read). Chat: paste it first.
Reload: new session
Check it loaded: ask it to repeat one rule from the file
Checked against the official page on 2026-10-12.
Claude Code
Save as CLAUDE.md in the project root, or .claude/CLAUDE.md. Other agents share the repo: put the shared rules in AGENTS.md and make CLAUDE.md one line, @AGENTS.md. Commit it. Start a new session: the file is read at launch.
Reload: new session (or /memory to open the files)
Check it loaded: /context lists the Memory files it read; /skills, /agents, /hooks list the rest; the InstructionsLoaded hook event fires once per loaded instruction file
Checked against the official page on 2026-10-12.
Codex
Save as AGENTS.md in the repo root. Codex concatenates AGENTS.md from the git root down to the working directory, closer wins. Commit it. Start a new session.
Reload: new session
Check it loaded: ask: Summarize the current instructions; codex status
Checked against the official page on 2026-10-12.
Cursor
Save as AGENTS.md in the repo root, or as .cursor/rules/<name>.mdc with alwaysApply: true in its frontmatter. Commit it. Reopen the project so it reindexes.
Reload: reopen the project
Check it loaded: Cursor Settings → Rules shows each rule and its status; no per-reply indicator
Checked against the official page on 2026-10-12.
Aider
Save as CONVENTIONS.md and add read: [CONVENTIONS.md] to .aider.conf.yml, or start with aider --read CONVENTIONS.md. Aider does not read AGENTS.md on its own: pass it with --read too.
Reload: restart aider
Check it loaded: none documented: ask it to repeat one rule from the file
Checked against the official page on 2026-10-12.
Cline
Save as .clinerules/<name>.md in the repo root (a folder, not the old single file), or as AGENTS.md. Commit it. Start a new task.
Reload: new task
Check it loaded: the Rules panel; the reply shows 'Conditional rules applied: …' for path rules
Checked against the official page on 2026-10-12.
OpenCode
Save as AGENTS.md in the project root. Commit it. Start a new session.
Reload: new session
Check it loaded: none documented: ask it to repeat one rule from the file
Checked against the official page on 2026-10-12.
OpenHands
Save as AGENTS.md in the repo root. Keyword snippets go in .agents/skills/<name>/SKILL.md with a triggers: list. Commit. Start a new conversation after edits.
Reload: new conversation
Check it loaded: Agent Canvas → Customize → Skills
Checked against the official page on 2026-10-12.
Ollama
Put the text in a Modelfile as SYSTEM """...""" with FROM <model> and PARAMETER num_ctx <n>, then ollama create <name> -f Modelfile and run <name>. Chat-only: paste it as the first message instead.
Reload: ollama create again
Check it loaded: ollama show --modelfile <name> prints the SYSTEM; ollama ps shows the loaded context size
Checked against the official page on 2026-10-12.