orchestrator CLAUDE.md

Project instructions for Orchestrator, a central repository that shares Claude Code agents, skills, commands, hooks, and guidance with other projects.

In plain words
What is it for?
Use them when configuring the organization, discovering shared resources, adding or changing agents and skills, or testing changes before applying them across application repositories.
Why use it?
They explain the setup and the shared-resource structure, which matters because a change in this repository can affect every linked project.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/boardkit/orchestrator/claude-md
Clone the repo
git clone --depth 1 https://github.com/BoardKit/orchestrator
Per session 8,409 This file is loaded in full into every session.
When invoked 8,409 The same file — it is already loaded in full.
Security scan D 3 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.08409 $0.08409
Opus 5 $0.04204 $0.04204
Sonnet 5 $0.01682 $0.01682
Haiku 4.5 $0.00841 $0.00841

Measured 2d ago against content hash d25069de3b84, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade D, and why

orchestrator CLAUDE.md scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

- `your-repo/.claude/settings.json -> ../../../orchestrator/shared/settings/your-repo/settings.json`

Enumerates other installed skillsmediumAgent snooping

Other skills' SKILL.md files reveal prompts, capabilities and secrets that should be invisible to peers.

ls -la your-repo/.claude/skills/

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

rm -rf setup/
CLAUDE.md · 990 lines

How it starts

The opening of the file, as written. The whole thing — 990 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Orchestrator - Claude Code Context

⚠️ SETUP REQUIRED - Run /setup-orchestrator to configure this for your organization.

Last Updated: [DATE - will be updated by setup wizard]


Repository Overview

What is this repo? The Orchestrator is a central infrastructure repository that provides shared Claude Code resources (agents, skills, hooks, commands) to all projects via symlinks.

Purpose: Single source of truth for:

  • Generic AI agents (code review, planning, documentation, refactoring)
  • Auto-triggering skills (organization-specific development patterns)
  • Hooks (skill activation, file tracking)
  • Slash commands (dev docs creation)
  • Shared guidelines (architecture, error handling, testing)

Key Difference from Application Repos:

  • orchestrator (this repo): Shared infrastructure provider
  • your repositories: [Will be listed here after setup - e.g., app repo, core repo, etc.]

Critical: Changes here affect ALL repos via symlinks. Test in application repos before committing.


Resource Discovery Map

This section lists everything available in the orchestrator. Use this as your reference for what exists and when to use it.

Skills (Auto-Trigger)

Skills activate automatically when you edit files matching specific patterns or keywords.

[REPOSITORY-SPECIFIC SKILLS WILL BE GENERATED DURING SETUP]

After running /setup-orchestrator, you will have one skill per repository, like:

[repo-name]-guidelines (Example)

When it triggers: Editing files in your [repo-name] repo

  • File patterns: [e.g., **/repo-name/**/*.tsx, **/repo-name/**/*.py]
  • Keywords: [e.g., React, FastAPI, etc. - detected from your tech stack]

What it provides:

  • [Tech stack-specific development patterns]
  • [Error handling guidance for your frameworks]
  • [Testing patterns for your tools]

References: guidelines/error-handling.md, guidelines/testing-standards.md

Status: ⏳ Will be created during setup

Read the full file on GitHub · 990 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 990 lines · 8,409 tokens per session scan D d25069de3b84

Subscribe to this mod's changes

orchestrator CLAUDE.md is an instructions file published in the GitHub repository BoardKit/orchestrator (37 stars, last pushed 5mo ago), licensed MIT. It adds 8,409 tokens to every session, about $0.0420 per session on Opus 5. A static security scan graded it D with 3 findings (reads agent configuration directories, enumerates other installed skills, recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.