Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/awdr74100/figwright/claude-mdgit clone --depth 1 https://github.com/awdr74100/figwrightWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/awdr74100/figwright/claude-md)<a href="https://agentmods.dev/instructions/awdr74100/figwright/claude-md"><img src="https://agentmods.dev/badge/instructions/awdr74100/figwright/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00720 | $0.00720 |
| Opus 5 | $0.00360 | $0.00360 |
| Sonnet 5 | $0.00144 | $0.00144 |
| Haiku 4.5 | $0.00072 | $0.00072 |
Grade A, and why
figwright CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
CLAUDE.md
Read AGENTS.md first — it's the single source of guidance for this repo: architecture, layout, tech stack, commands, conventions, release flow, and gotchas.
Claude Code specifics:
- This repo is a Figma MCP server. The project-scoped
.mcp.jsonlaunches the local build (packages/mcp/dist/index.mjs), so after changingpackages/mcporpackages/sharedyou mustpnpm buildand restart the MCP connection before thefigwrighttools reflect your change. - There are no git hooks; CI is the gate. When you edit through Claude Code, the PostToolUse hook (
.claude/hooks/format-on-edit.mjs) auto-formats and lints the file — don't hand-format. - The canonical checks before pushing are
pnpm typecheck && pnpm lint && pnpm format:check && pnpm knip && pnpm build && pnpm test(the same gates CI runs). - The MCP SDK is v2 —
@modelcontextprotocol/server(plus its transitive@modelcontextprotocol/core), not the v1@modelcontextprotocol/sdk.src/index.tsbuilds the server in a factory and hands it toserveStdio, which owns the transport and the protocol-era decision. - The SDK is a runtime dependency — it generates every tool's JSON Schema and negotiates the protocol version — so a release can move what clients see while
tscstays green.packages/mcp/test/e2e/mcp-wire.test.tsis the gate for exactly that: it spawns the builtdistover real stdio, speaks raw JSON-RPC (never the SDK's ownClient, which would move in lockstep and hide the regression), and asserts the advertised tool set, each schema against an SDK-independent derivation, the dialect, annotations, prompts, a livetools/call, that a 2024-11-05 client is still served, that a 2026-07-28 client gets the modern era and is refused thepingthat revision deleted, and that the process still exits cleanly when the client goes away mid-session. It runs inpnpm testbut needspnpm buildfirst, and skips whendistis missing. - The
mcp-sdk-auditskill (.claude/skills/) owns SDK upgrades. The gate answers did anything break; the skill'sprobe.mjsanswers what moved, by snapshotting the live wire contract before and after a bump and diffing. Reach for it on any@modelcontextprotocol/*bump. - The
figma-typings-auditskill (.claude/skills/) owns@figma/plugin-typingsupgrades end to end: it diffs the.d.tsbetween the installed and target version (that package ships no changelog), maps the result onto the sandbox handlers, the hand-written Zod mirrors inshared, and the tool registry, then bumps and implements what's worth having. It diffs before upgrading — the installed version is the baseline. Reach for it on a Renovate bump PR for that package: a green pipeline does not mean the update was absorbed, sincesharedmirrors Figma's shapes with no compile-time coupling to the typings.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 14 lines · 720 tokens per session scan A 3dd3f81a1a19
figwright CLAUDE.md is an instructions file published in the GitHub repository awdr74100/figwright (667 stars, last pushed today), licensed MIT. It adds 720 tokens to every session, about $0.0036 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
Figma-to-Code_MCP CLAUDE.md
Instructions for vincegx/Figma-to-Code_MCP, covering claude.md, project overview, essential commands, docker environment (primary) and start the application (hot reload enabled).
FigCC AGENTS.md
Instructions for madebypan/FigCC, covering agents.md, project identity, runtime architecture, security invariants and compatibility and storage.
FigCC CLAUDE.md
Instructions for madebypan/FigCC, covering claude.md and claude-specific runtime note.
canicode CLAUDE.md
Instructions for let-sunny/canicode, covering canicode, core goal, target environment, tech stack and project structure.
figma-ios-codegen AGENTS.md
Instructions for mythkiven/figma-ios-codegen, covering project agent rules, 必读规则文件, 何时启用本流程, 铁律(最高优先级) and 架构(1 → 2 → 4;阶段 3 仓外).
SoDam-Design-Kit AGENTS.md
AGENTS.md instructions for sodam-ai/SoDam-Design-Kit, covering sodam-design-kit — codex 규칙, 목표, 작업 순서 (고정), 절대 금지 and 완료 조건.