Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/fcakyon/claude-codex-settings/setupgit clone --depth 1 https://github.com/fcakyon/claude-codex-settingsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00008 | $0.00461 |
| Opus 5 | $0.00004 | $0.00230 |
| Sonnet 5 | $0.00002 | $0.00092 |
| Haiku 4.5 | $0.00001 | $0.00046 |
Grade D, and why
setup scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- Linux: curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
- Linux: curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- Linux: curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash What it actually says
Azure Tools Setup
Configure the Azure MCP server with Azure CLI authentication.
Step 1: Check Prerequisites
Check if Azure CLI is installed:
az --version
Check if Node.js is installed:
node --version
Report status based on results.
Step 2: Show Installation Guide
If Azure CLI is missing, tell the user:
Azure CLI is required for Azure MCP authentication.
Install Azure CLI:
- macOS: brew install azure-cli
- Linux: curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
- Windows: winget install Microsoft.AzureCLI
After installing, restart your terminal and run this setup again.
If Node.js is missing, tell the user:
Node.js 20 LTS or later is required for Azure MCP.
Install Node.js:
- macOS: brew install node@20
- Linux: curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash - && sudo apt-get install -y nodejs
- Windows: winget install OpenJS.NodeJS.LTS
After installing, restart your terminal and run this setup again.
Step 3: Check Authentication
If prerequisites are installed, check Azure login status:
az account show
If not logged in, tell the user:
You need to authenticate to Azure.
Run: az login
This opens a browser for authentication. After signing in, you can close the browser.
Step 4: Verify Configuration
After authentication, verify:
- Read
${CLAUDE_PLUGIN_ROOT}/.mcp.jsonto confirm Azure MCP is configured - Tell the user the current configuration
Step 5: Confirm Success
Tell the user:
Azure MCP is configured!
IMPORTANT: Restart Claude Code for changes to take effect.
- Exit Claude Code
- Run `claude` again
To verify after restart, run /mcp and check that 'azure' server is connected.
Reference: https://github.com/microsoft/mcp/tree/main/servers/Azure.Mcp.Server
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 93 lines · 8 tokens per session scan D 7f44e6fc1454
setup is a command published in the GitHub repository fcakyon/claude-codex-settings (1,114 stars, last pushed 2d ago), licensed Apache-2.0. It adds 8 tokens to every session and 461 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it D with 3 findings (asks for root, downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
optimize
Command "optimize" from doccker/cc-use-exp, covering 第 0 步：范围选择, 统计文件数和行数, 第 1 步：项目画像, 扫描内容 and 输出格式.
design
技术设计（doc 文档框架 / checklist 质量检查）.
check-toolsearch
Command "check-toolsearch" from doccker/cc-use-exp, covering 执行步骤, 1. 尝试调用 websearch, 2. 获取本机版本 and 3. 判断结果.
ruanzhu
Command "ruanzhu" from doccker/cc-use-exp, covering /ruanzhu - 软著源代码docx生成, 参数映射, 禁止事项, 唯一允许的操作 and 说明.
crossframe-essay
使用 CrossFrame Essay 把用户给出的主题、素材或问题写成中文批判性洞察文章。.
crossframe-max
Use CrossFrame Max only when the user explicitly asks for maximum CrossFrame mode, exhaustive structural projection, full-scale world-model interpretation, or no word-limit complete explanation.