Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/ahonn/dotfiles/claude-mdgit clone --depth 1 https://github.com/ahonn/dotfilesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/ahonn/dotfiles/claude-md)<a href="https://agentmods.dev/instructions/ahonn/dotfiles/claude-md"><img src="https://agentmods.dev/badge/instructions/ahonn/dotfiles/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00532 | $0.00532 |
| Opus 5 | $0.00266 | $0.00266 |
| Sonnet 5 | $0.00106 | $0.00106 |
| Haiku 4.5 | $0.00053 | $0.00053 |
Grade B, and why
dotfiles CLAUDE.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
sudo nix run nix-darwin/master#darwin-rebuild -- switch --flake .#workstation What it actually says
CLAUDE.md
This file provides guidance to Claude Code when working with code in this repository.
Overview
nix-darwin dotfiles repository managing macOS development environments via Nix flakes. Supports multiple hosts with shared base modules and host-specific overrides.
Essential Commands
# Apply configuration (workstation - primary dev machine)
sudo nix run nix-darwin/master#darwin-rebuild -- switch --flake .#workstation
# Apply configuration (homelab - Mac Mini server)
sudo nix run nix-darwin/master#darwin-rebuild -- switch --flake .#homelab
# Update flake inputs
nix flake update
# Co-update Homebrew brew tag + core/cask (avoid brew/core DSL drift)
./scripts/update-homebrew-inputs.sh
# Validate without applying
nix flake check
Git uses conventional commits via cz commit or git cz.
Architecture
Host Configuration Flow
flake.nix
├── hosts/workstation/ # Primary dev machine
│ ├── home.nix # Imports base + workstation programs
│ └── homebrew.nix # Workstation-specific casks/brews
└── hosts/homelab/ # Mac Mini (macOS 13, uses stable neovim)
├── home.nix
└── homebrew.nix
Module Layers
- modules/darwin/: System-level (nix settings, system defaults)
- modules/home-manager/base.nix: Shared user config (zsh, git, tmux, starship, direnv, claude-code)
- modules/home-manager/programs/: Individual program modules
- modules/homebrew/base.nix: Shared homebrew config
Program Toggle Pattern
Programs use my.{program}.enable in host's home.nix:
my.neovim.enable = true; # workstation: unstable neovim
my.neovim-stable.enable = true; # homelab: stable for macOS 13
my.aerospace.enable = true;
File Types
| Location | Rebuild Required | Use Case |
|---|---|---|
modules/**/*.nix |
Yes | Nix expressions |
config/ |
No | App configs (nvim, aerospace, zed) |
symlink/ |
No | Dotfiles via mkOutOfStoreSymlink |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 63 lines · 532 tokens per session scan B dfe550a02656
dotfiles CLAUDE.md is an instructions file published in the GitHub repository ahonn/dotfiles (62 stars, last pushed 3d ago), licensed MIT. It adds 532 tokens to every session, about $0.0027 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other instructions, from other repositories
dotfiles CLAUDE.md
Instructions for IvanWng97/dotfiles, a project described as: macOS dotfiles managed with GNU stow — ghostty, neovim, zsh, tmux, starship, lazygit, homebrew.
nix-config AGENTS.md
AGENTS.md instructions for dliberalesso/nix-config, covering agent instructions for nix-config, build/lint/test commands, architecture guidance, architecture and common patterns.
dotfiles AGENTS.md
Cross-platform dotfiles managed by Chezmoi with Homebrew/apt and per-language version managers. One-command bootstrap for macOS and Linux with Neovim, Tmux, Zsh, and AI agent skills.
j3w1zsh AGENTS.md
AGENTS.md instructions for j3w1/j3w1zsh, covering j3w1zsh agent instructions, purpose and authority, start every run, security and privacy and platform and installer contract.
dotfiles CLAUDE.md
Claude Code instructions for ooloth/dotfiles, covering claude.md, uphold project invariants, folder structure, symlink management and claude development workflow.
dotfiles AGENTS.md
Instructions for helderberto/dotfiles, covering agents.md, before coding, surgical changes, verification and code principles.