Codeman: Instructions file for Claude Code

CLAUDE.md

Codeman CLAUDE.md is an instructions file for Claude Code from Ark0N/Codeman. It costs 38,114 tokens per session, scanned F, original, MIT.

Repository rules for Codeman that explain its structure, safety requirements, testing process and deployment commands, with deeper details kept in architecture documents.

In plain words
What is it for?
Use them before changing code, configuring tools, running tests, checking types or linting, and preparing a deployment.
Why use it?
They help coding agents avoid damaging project files, skipping tests or deploying unsafely while preserving the repository’s documented conventions.

Instructions file for Claude Code

Written for Claude Code: Claude Code plugin machinery. Also seen: reads .claude/ paths; mentions .claude-plugin; mentions CLAUDE.md.

This is Ark0N/Codeman's own configuration. It tells Claude Code how to work on Codeman itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything Codeman configures →

Reuse

Borrowing it

Nothing to install: this file belongs to Ark0N/Codeman. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/Ark0N/Codeman/master/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/Ark0N/Codeman

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for Codeman CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/ark0n/codeman/claude-md/github.svg)](https://agentmods.dev/instructions/ark0n/codeman/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/ark0n/codeman/claude-md"><img src="https://agentmods.dev/badge/instructions/ark0n/codeman/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for Codeman CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/ark0n/codeman/claude-md"><img src="https://agentmods.dev/badge/instructions/ark0n/codeman/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 38,114 This file is loaded in full into every session.
When invoked 38,114 The same file — it is already loaded in full.
Security scan F 5 findings. A grade says what 26 rules found in the file — not that it is safe. ✓ AI security review Sonnet 5 · 7 Sept 2026 📄 Read the review
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.38114 $0.38114
Opus 5.5 $0.15246 $0.15246
Sonnet 5.5 $0.07623 $0.07623
Haiku 4.5 $0.03811 $0.03811

Measured 3d ago against content hash 8c5ae97c825a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade F, and why

Codeman CLAUDE.md scanned grade F with 5 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Harvests environment variableshighData exfiltration

Enumerating or grepping the environment for keys collects credentials unrelated to what the mod says it does.

**Clone a repository as a case** (issue #236, Add Case → **Clone Repo**): `POST /api/cases/clone` clones synchronously into the caller's case space (bounded by `GIT_CLONE_TIMEOUT_MS`, no job store); `POST /api/cases/clon

Downloads and executes remote codehighSupply chain

curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.

**`install.sh`** (repo root) is the public `curl | bash` installer: it installs Node/tmux/git/build tools, clones to `~/.codeman/app`, builds, and offers a systemd/launchd service, asking every question BEFORE the unatte

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

- **`envOverrides` flow `CLAUDE_CODE_*` / `OPENCODE_*` / `CODEX_*` / `GEMINI_*` / `GOOGLE_*` / `ANTIGRAVITY_*` / `PI_*` / `GROK_*` / `XAI_*` / `DSH_*` / `DEEPSEEK_*` / `COPILOT_*` env vars, plus exact-key `CLAUDE_CONFIG_

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

1. **Backend changes**: Hit the API endpoint with `curl` and verify the response

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

**Utilities**: `src/utils/` — re-exported via index. Key: `CleanupManager`, `LRUMap` (⚠ NOT in the barrel — import from `./utils/lru-map.js` directly), `StaleExpirationMap`, `BufferAccumulator`, `stripAnsi`, `Debouncer`,
CLAUDE.md · 382 lines

How it starts

The opening of the file, as written. The whole thing — 382 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

Deep implementation detail lives in docs/architecture-invariants.md. This file holds the rules that prevent mistakes; that file holds the mechanisms, file inventories, and the history behind each rule. Pointers below are written as → architecture-invariants#anchor. When the goal is raw throughput, docs/SPEEDRUN.md is the fast-execution protocol (it removes ceremony, never the safety rules here). The user-facing manual is docs/wiki/ (mirrored to the GitHub wiki by CI; see the CI note under Additional Commands), and AGENTS.md deliberately just points here.

This file is in .prettierignore on purpose. Prettier's markdown printer escapes underscores inside the glob-heavy paths used throughout (agent-*.jsonl became agent-\_.jsonl, collapsing backtick spans and corrupting a whole paragraph). Do not remove the ignore entry, and do not run prettier --write on it.

Repo root is kept short on purpose (the README sits below the file listing on GitHub). Config lives in config/ (eslint.config.js, knip.json, the vitest configs), Prettier's config is the "prettier" key in package.json, and SECURITY.md is under .github/. Root-only files are the ones tools genuinely require there: CLAUDE.md + AGENTS.md (loaded from the root by Claude Code / Codex), CHANGELOG.md (changesets writes it next to package.json), tsconfig.json, .editorconfig, .nvmrc/.npmrc, .prettierignore (resolved relative to cwd), vitest.config.ts (a one-line re-export of config/vitest.ci.config.ts: vitest finds its config by walking up from cwd, so without it a bare npx vitest ran with no setup file and wrote into the real ~/.codeman, #640), LICENSE (GitHub detection), .dockerignore (the build context is the repo root, so Docker resolves it there and nowhere else) and install.sh (its raw URL is the published install one-liner). .claude-plugin/marketplace.json is root-only for the same reason: /plugin marketplace add Ark0N/Codeman reads it from the repo root and nowhere else, which makes the repo its own plugin marketplace. The one plugin it lists is plugins/codeman/ (manifest + README + a MIRROR of skills/codeman/), and ⚠️ the plugin is a small separate directory on purpose: claude plugin install copies the plugin root into its cache, and a plugin root that carries a package.json gets an npm install at install time (measured with the repo root as plugin root: 832 MB, 511 packages and this repo's postinstall on every installer's machine), while a symlink to skills/codeman would dangle in the copy. skills/codeman/ stays the single source; scripts/sync-plugin.mjs mirrors it and writes package.json's version into both manifests inside version-packages, and test/plugin-manifest.test.ts pins the byte-identity, the versions, the absence of a package.json in the plugin root and that no other component (commands/, agents/, hooks/, .mcp.json, settings.json) rides along. npm run check:plugin runs that drift check plus both strict validations with EXPLICIT paths (plugins/codeman, .claude-plugin/marketplace.json): a bare . argument copied out of prose reads as a full stop and gets dropped, which surfaces as missing required argument 'path'. Needs the claude CLI, so it is a local check, not a CI step. Don't relocate those.

Read the full file on GitHub · 382 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago Changed · +4 lines · +1,162 tokens per session 8c5ae97c825a
  2. 5d ago Changed · +5 lines · +2,627 tokens per session 4e9cd1f9f276
  3. 9d ago Changed · +793 tokens per session 3fb219283fa8
  4. 11d ago Changed · +4 lines · +1,325 tokens per session e367960b37a8
  5. 13d ago Changed · -146 lines · -13,641 tokens per session ca45ee6d7546
  6. 17d ago Changed · +4 lines · +1,996 tokens per session 5c6c17926b52
  7. 18d ago Changed · +6 lines · +4,513 tokens per session d38778297604
  8. 22d ago Changed · +3 lines · +710 tokens per session 6c3bc2dea2dc
  9. 23d ago Changed · +3 lines · +1,386 tokens per session 511c97d93809
  10. 26d ago First seen · 499 lines · 37,243 tokens per session scan F 1e75dbd44b38

Subscribe to this mod's changes

Codeman CLAUDE.md is an instructions file published in the GitHub repository Ark0N/Codeman (817 stars, last pushed 2d ago), licensed MIT. It adds 38,114 tokens to every session, about $0.1525 per session on Opus 5.5. A static security scan graded it F with 5 findings (harvests environment variables, downloads and executes remote code, reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,786 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,731 tokens

deno copilot-instructions.md

Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.

denoland/deno · 3,077 tokens