Borrowing it
Nothing to install: this file belongs to cfdude/mac-shell-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/cfdude/mac-shell-mcp/main/CLAUDE.mdgit clone --depth 1 https://github.com/cfdude/mac-shell-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/cfdude/mac-shell-mcp/claude-md)<a href="https://agentmods.dev/instructions/cfdude/mac-shell-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/cfdude/mac-shell-mcp/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/cfdude/mac-shell-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/cfdude/mac-shell-mcp/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.08419 | $0.08419 |
| Opus 5.5 | $0.03368 | $0.03368 |
| Sonnet 5.5 | $0.01684 | $0.01684 |
| Haiku 4.5 | $0.00842 | $0.00842 |
Grade A, and why
mac-shell-mcp CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 463 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md
PM Conductor — operating rules
This repo is managed by the pm plugin. The conductor sits ABOVE OpenSpec and Superpowers.
Epics are lane-agnostic (openspec | superpowers | claude-code | decision | external);
OpenSpec is one lane. Stories come from each epic's source (OpenSpec tasks.md, a Superpowers
plan, or a manual list). Follow these rules:
- Detours — when something blocks the active epic, CLASSIFY before fixing:
- Minimal (small, self-contained, no design ambiguity): fix → test → commit → push,
then run
/pm:detour --minimal "<what>"so it is recorded in.conductor/detours.log. Then resume. - Substantial (own design / changes shared behavior / multi-step): run
/pm:detour. It becomes its own epic in the appropriate lane (OpenSpec proposal, Superpowers plan, etc.). Register that epic FIRST, then PUSH the current one onto the detour stack withpush-detour <parent> --detour <new-id> --reason "<why>" (--reconcile | --no-reconcile). NEVER hand-edit.conductor/state.jsonto push or pop a frame. The verb IS the transition, and it is what supplies the validation, the write-conflict guard, the read-back verification and the Honcho line a hand-edit has none of. Exactly one of the two reconcile flags is REQUIRED and there is no default: whether the detour can invalidate the paused epic's plan is a judgment, and a default makes an absent decision look like a considered one. Say--reconcileunless you are certain the detour touches nothing the paused epic depends on.
- Minimal (small, self-contained, no design ambiguity): fix → test → commit → push,
then run
- State of record is
.conductor/state.json. After any change to epics, status, priority, or the detour stack, re-render with/pm:status. Never hand-editPROJECT.md. - Resuming after a detour — use
/pm:resume, which pops the frame withpop-detour [<paused-id>]— again a verb, never a hand-edit. It removes the frame, resumes the epic and writesreconcileNeededin the SAME write, which is what makes the obligation survive the frame's removal. If the popped frame hadreconcileOnResume, run the reconcile gate (reconciler agent) BEFORE writing code, then write its verdict back durably withrecord-reconcile <id> --detour <detourId> --verdict valid|invalidated --amendments none(the reconciler'sAMENDMENTS: none), or one--amendment "<line>"per other AMENDMENTS line — this attaches{verdict, amendments, reconciledAt}to the paused epic's link to that detour, instead of the judgment only ever living in conversation. It is accepted only for a detour pushed--reconcileand already popped, andreconcileNeededclears only when no such detour is left unanswered;pop-detournames every detour owed. A BASH WRITE IS A WRITE TOO: a heredoc redirection, an in-placesed, atee, a copier or anything else that puts bytes in a file is forbidden while the reconcile is owed, exactly asEditis. The PreToolUse guard mechanically blocks a closed list of those shapes, and that list is incomplete BY CONSTRUCTION — a path built from a variable, aneval, a script invoked by name, an interpreter given inline source all pass it. Passing the check is not permission; this line is the obligation and the check is only its backstop. - Honcho — on every PUSH and POP, also write a one-line memory to Honcho
("paused X for Y" / "resumed X, reconciled vs Y") so the relationship survives outside
this repo.
push-detourprints the PUSH line for you and logs it to.conductor/honcho-memories.log; paste it into your Honcho tool call.pop-detourprints the POP line only when nothing needs reconciling — with a gate armed, "reconciled vs Y" is not yet true, so emit it withhoncho-memory pop <id> "<detour>; reconcile = …"after the verdict. The engine formats and logs; it never calls Honcho itself. - Keep
tasks.mdcheckboxes truthful — they are the source of truth for story progress. - Roadmap as backlog — work you intend to do but haven't proposed yet can be
registered now with
/pm:epic add … --status planned(any lane). Planned epics show as ordered backlog inPROJECT.mdand aplanned: Ncount in the briefing, without a "no change on disk" warning;/pm:syncflips an openspec planned epic to untriaged once its change is proposed. Have a roadmap doc? Read it in-session and load each item this way. - Delegate discovery. If you do not already know the file path, do not go looking
yourself. A subagent's transcript never enters yours — only its final report does — so
an open-ended read costs a conclusion instead of a transcript when it is delegated.
"Where is X handled", "does a spec for this already exist", "what does this epic touch",
"what did the last three changes here do": dispatch an
Exploreorgeneral-purposesubagent and use what it concludes. Reserve an INLINE read for the narrow case where you already know the exact file and want one value out of it. This binds the ORCHESTRATING agent, which is the half that has no such rule: a dispatched child is already told to return a fixed report and not to narrate. It binds hardest across a hierarchy run or a multi-epic backlog, where your context survives many epics and is therefore the scarce resource — discovery you perform inline is paid for once per epic and never reclaimed. DELEGATING NEVER WEAKENS A FULL-READ REQUIREMENT. Where this instruction demands the whole document — the epic-level-autonomy preflight scan, and re-reading an epic's source before it becomes the work — the subagent reads the whole document and returns the finding. What is forbidden is substituting a keyword grep for a full read, and that is forbidden whoever performs it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · +59 lines · +898 tokens per session 105b25abfec6
- 4d ago Changed · +7 lines · +197 tokens per session 82cb947da437
- 1mo ago Changed · +30 lines · +649 tokens per session 06d306da37e7
- 2mo ago Changed · +129 lines · +2,507 tokens per session 821e3eb84d0f
- 2mo ago First seen · 238 lines · 4,168 tokens per session scan A 5e5174933ec4
mac-shell-mcp CLAUDE.md is an instructions file published in the GitHub repository cfdude/mac-shell-mcp (28 stars, last pushed 4d ago), licensed MIT. It adds 8,419 tokens to every session, about $0.0337 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
mac-shell-mcp CLAUDE.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| mac-shell-mcp CLAUDE.mdcfdude/mac-shell-mcp | Instructions file | 28 | 4d ago | MIT | A | 8,419 | Claude Code |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | yesterday | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |