Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/andrewaltimit/template-repo/claude-code-setupgit clone --depth 1 https://github.com/AndrewAltimit/template-repoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/andrewaltimit/template-repo/claude-code-setup)<a href="https://agentmods.dev/agents/andrewaltimit/template-repo/claude-code-setup"><img src="https://agentmods.dev/badge/agents/andrewaltimit/template-repo/claude-code-setup.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01497 |
| Opus 5 | $0.00000 | $0.00749 |
| Sonnet 5 | $0.00000 | $0.00299 |
| Haiku 4.5 | $0.00000 | $0.00150 |
Grade C, and why
claude-code-setup scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.0/install.sh | bash Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.0/install.sh | bash How it starts
The opening of the file, as written. The whole thing — 223 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Claude Code Setup and Configuration
This guide covers the setup and usage of Claude Code as the primary AI development assistant in this repository.
Overview
Claude Code is Anthropic's official CLI tool for AI-assisted development. It serves as the primary development partner for complex tasks including architecture design, implementation, debugging, and documentation.
Installation
Prerequisites
- Node.js 22.16.0 (specifically required by Claude CLI)
- nvm (Node Version Manager) - recommended for managing Node.js versions
Step 1: Install nvm and Node.js
# Install nvm (if not already installed)
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.0/install.sh | bash
# Reload shell configuration
source ~/.bashrc # or ~/.zshrc
# Install and use Node.js 22.16.0
nvm install 22.16.0
nvm use 22.16.0
Step 2: Install Claude CLI
# Ensure correct Node.js version
nvm use 22.16.0
# Install Claude Code globally
npm install -g @anthropic-ai/claude-code
Step 3: Authenticate
# Run the login command
claude login
This opens a browser for authentication. After successful login, credentials are stored in one of these locations:
~/.claude.json(most common)~/.config/claude/claude.json~/.claude/claude.json
Authentication Methods
Subscription Authentication (Default)
Claude CLI uses subscription-based authentication tied to your Anthropic account:
claude login
Important: Subscription authentication is machine-specific. The tokens cannot be transferred to containers or other machines.
API Key Authentication (Alternative)
For CI/CD environments or when subscription auth is unavailable:
export ANTHROPIC_API_KEY="your-api-key-here"
The agents automatically prefer API key authentication when available.
Usage
Interactive Mode
# Start an interactive Claude Code session
./tools/cli/agents/run_claude.sh
# Or directly
claude
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 223 lines · 0 tokens per session scan C 4606434cf95c
claude-code-setup is an agent published in the GitHub repository AndrewAltimit/template-repo (131 stars, last pushed 1mo ago), licensed Unlicense. It costs nothing until one of its globs matches a file; then it loads 1,497 tokens. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
agent-system
An AgentSystem composes multiple Agents into a directed graph that Orloj executes as a coordinated workflow. The graph defines how messages flow between agents during task execution.
ai-safety-auditor
AI safety and security auditor for LLM systems. Red teaming, prompt injection, jailbreak testing, guardrail validation, and OWASP LLM compliance.
grader
INTERNAL SMARTS analyst dispatched by the decision-variance skill. Produces a SMARTS analysis and recommendation for one (artifact-position, scaffold-evidence) pair. Never decides — the user decides. Never dispatch directly.
Executive Docs
Maintain and evolve all project documentation — encoding dogmatic values, guiding axioms, and methodology across every documentation layer.
D4 Methodology Enforcer
Validate proposed changes against MANIFESTO.md axioms — flag over-interactivity, unnecessary token burn, and Programmatic-First violations.
decision-challenger
Adversarial red-team reviewer of ADRs. Builds the strongest case against each decision, names load-bearing assumptions, assigns confidence 1–5, and surfaces evidence that would prove a decision wrong. Read-only. Dispatched optionally by decision-variance. Reads ADRs from .codearbiter/decisions/.