claude-code-kickstart CLAUDE.md

A set of working instructions for Claude Code, an AI coding assistant. It defines how to start sessions, plan changes, write code, and verify results.

In plain words
What is it for?
It helps with multi-file code changes, session continuity, planning, code-quality checks, and end-of-session summaries.
Why use it?
It gives coding sessions a consistent process and preserves useful context between sessions. It also sets clear boundaries for when to plan, ask approval, or execute directly.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/codeverbojan/claude-code-kickstart/claude-md
Clone the repo
git clone --depth 1 https://github.com/codeverbojan/claude-code-kickstart
Per session 1,335 This file is loaded in full into every session.
When invoked 1,335 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01335 $0.01335
Opus 5 $0.00668 $0.00668
Sonnet 5 $0.00267 $0.00267
Haiku 4.5 $0.00134 $0.00134

Measured 2d ago against content hash 1817e6955602, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

claude-code-kickstart CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 142 lines

How it starts

The opening of the file, as written. The whole thing — 142 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Be concise. State conclusions first. Skip preamble and filler.

Core loop: gather context → act → verify → repeat.

1. Session Protocol

Start: read primer.md (state, next steps) and gotchas.md (past mistakes). Pick mode by scope:

  • 1–2 files: just do it.
  • 3–5 files: state scope, get approval, execute.
  • 5+ files: plan mode, phased execution, max 5 files per phase.

End: run /wrap-up before closing the session.

Continuity: prefer claude --continue over fresh sessions. --fork-session to branch. /compact proactively when context degrades. Don't switch models mid-session — delegate to sub-agents.

2. Planning

  • Plan and build are separate. "Think about this" = plan only, no code.
  • If the user gives a plan, execute it. Flag real problems; don't improvise.
  • Non-trivial work (3+ steps or architectural decisions): align on tradeoffs before writing code.
  • One-word replies ("yes", "do it", "push") = execute, don't restate the plan.

3. Code Quality

  • Senior-dev bar. Flawed architecture or duplicated state → propose structural fixes, don't just patch.
  • Write human code. No robotic comments or boilerplate.
  • Simple and correct beats elaborate and speculative.
  • On non-trivial changes, pause once: "is there a cleaner way?"

4. Execution Loop

Non-negotiable workflow for any task beyond a trivial one-liner:

  • One task at a time. Batch only closely-related small steps. Never implement task B before task A is fully done (impl + tests + review + fixes).
  • Implementation writes the tests. Same context, same turn. Tests are not a follow-up task — they're part of the definition of done.
  • Checkpoint reviews in parallel. After each meaningful chunk, launch review sub-agents concurrently (single message, multiple Agent calls). Minimum set: code-reviewer, security-reviewer, test-runner. Add accessibility-reviewer for UI work.
  • Review agents must read the plan first. Every review agent gets the task description, intended behavior, and the list of files touched — not just "review my code". A reviewer without intent can't judge correctness.
  • Review scope: bugs, security holes, data leaks, naming problems, inconsistencies, data corruption risks, edge cases, missing tests, race conditions.
  • Fix all valid findings before moving on. No "I'll address this in a follow-up." If a finding is invalid, state why in one sentence.
  • Never defer quality, testing, or security to the end. Each checkpoint is independently shippable.
  • Code understanding: when tracing dependencies, following call graphs, or exploring unfamiliar code, prefer SocratiCode MCP tools (codebase_search, codebase_graph_query) over raw grep for non-trivial searches.

Read the full file on GitHub · 142 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 142 lines · 1,335 tokens per session scan A 1817e6955602

Subscribe to this mod's changes

claude-code-kickstart CLAUDE.md is an instructions file published in the GitHub repository codeverbojan/claude-code-kickstart (2 stars, last pushed 4mo ago), licensed MIT. It adds 1,335 tokens to every session, about $0.0067 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.