Borrowing it
Nothing to install: this file belongs to rongxinzy/claude-code-best-practice-zh. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/rongxinzy/claude-code-best-practice-zh/main/.claude/commands/workflows/best-practice/workflow-claude-settings.mdgit clone --depth 1 https://github.com/rongxinzy/claude-code-best-practice-zhWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/rongxinzy/claude-code-best-practice-zh/workflow-claude-settings)<a href="https://agentmods.dev/commands/rongxinzy/claude-code-best-practice-zh/workflow-claude-settings"><img src="https://agentmods.dev/badge/commands/rongxinzy/claude-code-best-practice-zh/workflow-claude-settings/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/rongxinzy/claude-code-best-practice-zh/workflow-claude-settings"><img src="https://agentmods.dev/badge/commands/rongxinzy/claude-code-best-practice-zh/workflow-claude-settings.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00015 | $0.03978 |
| Opus 5 | $0.00008 | $0.01989 |
| Sonnet 5 | $0.00003 | $0.00796 |
| Haiku 4.5 | $0.00002 | $0.00398 |
Grade A, and why
workflow-claude-settings scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 244 lines — stays where its author put it; the contents beside it link to each section on GitHub.
工作流变更日志 —— 设置报告
你是 claude-code-best-practice 项目的协调员。你的工作是并行启动两个研究代理，等待它们的结果，合并发现，并呈现关于设置参考报告（best-practice/claude-settings.md）差异的统一报告。
检查版本数： $ARGUMENTS（默认：如果为空或非数字则为 10）
这是一个先读取后报告的工作流。启动代理，合并结果，生成报告。仅在用户批准时采取行动。
阶段 0: 并行启动两个代理
立即在同一条消息中使用 Task 工具生成两个代理（并行启动）：
代理 1: workflow-claude-settings-agent
使用 subagent_type: "workflow-claude-settings-agent" 生成。给它这个提示：
研究 claude-code-best-practice 项目的设置报告差异。检查最后 $ARGUMENTS 个版本（默认：10）。
获取这 3 个外部来源：
- 设置文档：https://code.claude.com/docs/zh-CN/settings
- CLI 参考：https://code.claude.com/docs/zh-CN/cli
- 变更日志：https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
然后读取本地报告文件（
best-practice/claude-settings.md）和 CLAUDE.md 文件。分析官方文档关于设置键、权限语法、钩子事件、MCP 配置、沙盒选项、插件设置、模型别名、显示设置和环境变量的说明与我们的报告文档之间的差异。返回结构化发现报告，涵盖缺失的设置、变更的类型/默认值、新设置添加、已弃用设置、权限语法变更、钩子事件变更、MCP 设置变更、沙盒设置变更、环境变量完整性、示例准确性、设置层次结构准确性和来源有效性。
代理 2: claude-code-guide
使用 subagent_type: "claude-code-guide" 生成。给它这个提示：
研究最新的 Claude Code 设置系统。我需要你找到：
- 所有当前支持的 settings.json 键的完整列表及其类型、默认值和描述
- 最近 Claude Code 版本中引入的任何新设置键
- 现有设置行为的变更（例如新的权限模式、新的钩子事件、新的沙盒选项）
- 设置层次结构的变更（新的优先级级别、新的文件位置）
- 权限语法的变更（新的工具模式、新的通配符行为）
- 新的钩子事件或钩子配置结构的变更
- MCP 服务器配置的变更（新的匹配字段、新的设置）
- 沙盒设置的变更（新的网络选项、新的命令）
- 插件配置的变更（新的字段、新的市场选项）
- 环境变量的变更（新的变量、已弃用的变量、变更的行为）
- 模型别名或模型配置的变更
- 显示/UX 设置的变更（状态行、加载动画、进度条）
- 任何设置键的弃用或删除
要彻底 —— 搜索网络、获取文档，并为你发现的所有内容提供具体的版本号和详细信息。
两个代理独立运行并返回它们的发现。
阶段 0.5: 读取验证清单
在代理运行时，读取 changelog/best-practice/claude-settings/verification-checklist.md。此文件包含累积的验证规则 —— 每个规则指定要检查什么、在什么深度、与哪个来源对比。每个规则必须在阶段 2 期间执行。该清单是项目差异检测的回归测试套件。
阶段 1: 读取之前的变更日志条目
在合并发现之前，读取文件 changelog/best-practice/claude-settings/changelog.md 获取最近 25 个变更日志条目。每个条目由 --- 分隔。解析那些之前条目的优先行动项，以便你可以将它们与当前发现对比。这让你可以识别：
- 重复项目 —— 之前出现过且仍未解决的问题
- 新解决的项目 —— 之前运行中现已修复的问题
- 新增项目 —— 此次运行中首次出现的问题
阶段 2: 合并发现与生成报告
**等待两个代理完成。**一旦你有了：
- workflow-claude-settings-agent 发现 —— 带有本地文件读取、外部文档获取和差异检测的详细报告分析
- claude-code-guide 发现 —— 关于最新 Claude Code 设置功能和变更的独立研究
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 244 lines · 15 tokens per session scan A 6cd359ea26e0
workflow-claude-settings is a command published in the GitHub repository rongxinzy/claude-code-best-practice-zh (6 stars, last pushed 5mo ago), licensed MIT. It adds 15 tokens to every session and 3,978 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
checklist
Generate a custom checklist for the current feature based on user requirements.
clarify
Identify underspecified areas in the current feature spec by asking up to 5 highly targeted clarification questions and encoding answers back into the spec.
specify
Create or update the feature specification from a natural language feature description.
analyze
Perform a non-destructive cross-artifact consistency and quality analysis across spec.md, plan.md, and tasks.md after task generation.
converge
Assess the current codebase against the feature's spec, plan, and tasks, then append any remaining unbuilt work as new tasks to tasks.md so implement can complete it.
implement
Execute the implementation plan by processing and executing all tasks defined in tasks.md.