Borrowing it
Nothing to install: this file belongs to Ark0N/Codeman. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Ark0N/Codeman/master/CLAUDE.mdgit clone --depth 1 https://github.com/Ark0N/CodemanWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/ark0n/codeman/claude-md)<a href="https://agentmods.dev/instructions/ark0n/codeman/claude-md"><img src="https://agentmods.dev/badge/instructions/ark0n/codeman/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/ark0n/codeman/claude-md"><img src="https://agentmods.dev/badge/instructions/ark0n/codeman/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.38114 | $0.38114 |
| Opus 5.5 | $0.15246 | $0.15246 |
| Sonnet 5.5 | $0.07623 | $0.07623 |
| Haiku 4.5 | $0.03811 | $0.03811 |
Grade F, and why
Codeman CLAUDE.md scanned grade F with 5 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Harvests environment variableshighData exfiltration
Enumerating or grepping the environment for keys collects credentials unrelated to what the mod says it does.
**Clone a repository as a case** (issue #236, Add Case → **Clone Repo**): `POST /api/cases/clone` clones synchronously into the caller's case space (bounded by `GIT_CLONE_TIMEOUT_MS`, no job store); `POST /api/cases/clon Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
**`install.sh`** (repo root) is the public `curl | bash` installer: it installs Node/tmux/git/build tools, clones to `~/.codeman/app`, builds, and offers a systemd/launchd service, asking every question BEFORE the unatte Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
- **`envOverrides` flow `CLAUDE_CODE_*` / `OPENCODE_*` / `CODEX_*` / `GEMINI_*` / `GOOGLE_*` / `ANTIGRAVITY_*` / `PI_*` / `GROK_*` / `XAI_*` / `DSH_*` / `DEEPSEEK_*` / `COPILOT_*` env vars, plus exact-key `CLAUDE_CONFIG_ Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
1. **Backend changes**: Hit the API endpoint with `curl` and verify the response Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
**Utilities**: `src/utils/` — re-exported via index. Key: `CleanupManager`, `LRUMap` (⚠ NOT in the barrel — import from `./utils/lru-map.js` directly), `StaleExpirationMap`, `BufferAccumulator`, `stripAnsi`, `Debouncer`, How it starts
The opening of the file, as written. The whole thing — 382 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md
This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
Deep implementation detail lives in
docs/architecture-invariants.md. This file holds the rules that prevent mistakes; that file holds the mechanisms, file inventories, and the history behind each rule. Pointers below are written as→ architecture-invariants#anchor. When the goal is raw throughput,docs/SPEEDRUN.mdis the fast-execution protocol (it removes ceremony, never the safety rules here). The user-facing manual isdocs/wiki/(mirrored to the GitHub wiki by CI; see the CI note under Additional Commands), andAGENTS.mddeliberately just points here.This file is in
.prettierignoreon purpose. Prettier's markdown printer escapes underscores inside the glob-heavy paths used throughout (agent-*.jsonlbecameagent-\_.jsonl, collapsing backtick spans and corrupting a whole paragraph). Do not remove the ignore entry, and do not runprettier --writeon it.Repo root is kept short on purpose (the README sits below the file listing on GitHub). Config lives in
config/(eslint.config.js,knip.json, the vitest configs), Prettier's config is the"prettier"key inpackage.json, andSECURITY.mdis under.github/. Root-only files are the ones tools genuinely require there:CLAUDE.md+AGENTS.md(loaded from the root by Claude Code / Codex),CHANGELOG.md(changesets writes it next topackage.json),tsconfig.json,.editorconfig,.nvmrc/.npmrc,.prettierignore(resolved relative to cwd),vitest.config.ts(a one-line re-export ofconfig/vitest.ci.config.ts: vitest finds its config by walking up from cwd, so without it a barenpx vitestran with no setup file and wrote into the real~/.codeman, #640),LICENSE(GitHub detection),.dockerignore(the build context is the repo root, so Docker resolves it there and nowhere else) andinstall.sh(its raw URL is the published install one-liner)..claude-plugin/marketplace.jsonis root-only for the same reason:/plugin marketplace add Ark0N/Codemanreads it from the repo root and nowhere else, which makes the repo its own plugin marketplace. The one plugin it lists isplugins/codeman/(manifest + README + a MIRROR ofskills/codeman/), and ⚠️ the plugin is a small separate directory on purpose:claude plugin installcopies the plugin root into its cache, and a plugin root that carries apackage.jsongets an npm install at install time (measured with the repo root as plugin root: 832 MB, 511 packages and this repo's postinstall on every installer's machine), while a symlink toskills/codemanwould dangle in the copy.skills/codeman/stays the single source;scripts/sync-plugin.mjsmirrors it and writespackage.json's version into both manifests insideversion-packages, andtest/plugin-manifest.test.tspins the byte-identity, the versions, the absence of apackage.jsonin the plugin root and that no other component (commands/,agents/,hooks/,.mcp.json,settings.json) rides along.npm run check:pluginruns that drift check plus both strict validations with EXPLICIT paths (plugins/codeman,.claude-plugin/marketplace.json): a bare.argument copied out of prose reads as a full stop and gets dropped, which surfaces asmissing required argument 'path'. Needs theclaudeCLI, so it is a local check, not a CI step. Don't relocate those.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · +4 lines · +1,162 tokens per session 8c5ae97c825a
- 5d ago Changed · +5 lines · +2,627 tokens per session 4e9cd1f9f276
- 9d ago Changed · +793 tokens per session 3fb219283fa8
- 11d ago Changed · +4 lines · +1,325 tokens per session e367960b37a8
- 13d ago Changed · -146 lines · -13,641 tokens per session ca45ee6d7546
- 17d ago Changed · +4 lines · +1,996 tokens per session 5c6c17926b52
- 18d ago Changed · +6 lines · +4,513 tokens per session d38778297604
- 22d ago Changed · +3 lines · +710 tokens per session 6c3bc2dea2dc
- 23d ago Changed · +3 lines · +1,386 tokens per session 511c97d93809
- 26d ago First seen · 499 lines · 37,243 tokens per session scan F 1e75dbd44b38
Codeman CLAUDE.md is an instructions file published in the GitHub repository Ark0N/Codeman (817 stars, last pushed 2d ago), licensed MIT. It adds 38,114 tokens to every session, about $0.1525 per session on Opus 5.5. A static security scan graded it F with 5 findings (harvests environment variables, downloads and executes remote code, reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
deno copilot-instructions.md
Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.