agent-setup: Instructions file for Claude Code

CLAUDE.md

agent-setup CLAUDE.md is an instructions file for Claude Code from DefaultPerson/agent-setup. It costs 1,925 tokens per session, scanned B, a copy of agent-setup AGENTS.md, MIT.

A set of instructions for an AI coding agent covering code changes, validation, priorities, and how to respond when uncertain.

In plain words
What is it for?
Use it to guide an agent through editing code, running available checks, and presenting its answers in the project’s preferred style.
Why use it?
It sets expectations for checking work, following the user’s language, and validating changes before reporting completion.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md. Also seen: mentions subagents; runs codex exec; mentions Codex.

This is DefaultPerson/agent-setup's own configuration. It tells Claude Code how to work on agent-setup itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything agent-setup configures →

Reuse

Borrowing it

Nothing to install: this file belongs to DefaultPerson/agent-setup. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/DefaultPerson/agent-setup/master/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/DefaultPerson/agent-setup

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for agent-setup CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/defaultperson/agent-setup/claude-md/github.svg)](https://agentmods.dev/instructions/defaultperson/agent-setup/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/defaultperson/agent-setup/claude-md"><img src="https://agentmods.dev/badge/instructions/defaultperson/agent-setup/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for agent-setup CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/defaultperson/agent-setup/claude-md"><img src="https://agentmods.dev/badge/instructions/defaultperson/agent-setup/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,925 This file is loaded in full into every session.
When invoked 1,925 The same file — it is already loaded in full.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin 92% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01925 $0.01925
Opus 5.5 $0.00770 $0.00770
Sonnet 5.5 $0.00385 $0.00385
Haiku 4.5 $0.00193 $0.00193

Measured 18d ago against content hash 363762bbd427, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

agent-setup CLAUDE.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 18d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

- On an action request use every reversible means you have, such as remote shells, MCP servers, CLIs, project skills and sudo where it runs without a prompt, and try the workaround before writing "can't". Hand back only
Origin

This is a copy

92% identical to agent-setup AGENTS.md — 17 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

CLAUDE.md · 41 lines

How it starts

The opening of the file, as written. The whole thing — 41 lines — stays where its author put it; the contents beside it link to each section on GitHub.

  • Never credit Claude or AI in commits, PRs, README, CHANGELOG or release notes: no Co-Authored-By trailer, no AI author, contributor or "built with" line.
  • Answer in the user's language and don't drift into the language of the material you are reading.

Replies

  • End a reply at what you found and did, even though the default recap asks for what's next. Add next steps only when only the user can do them or you owe them a check you couldn't run. Put links at the end under "Sources", not inline.
  • Show code in chat only when asked or when it isn't applied to files, and then only the changed hunks with 2 or 3 lines of context.
  • Tasks, notes, READMEs and checklists you write hold only what to do or know. Reasoning and research findings stay in the chat unless the file is meant to hold them, and "short" means the fewest lines that keep every point.
  • When you sort, merge or move notes or tasks, carry the original lines over verbatim and never swap content for a pointer to a source that will be retired. Before deleting the source, check with a script that every line of the original, from git HEAD or a .bak, is in the result, and list each line that isn't.
  • Be critical. Verify a claim before agreeing, change position only on new evidence you name, since pushback alone is not evidence, and don't praise unverified ideas. No moral lectures, and safety talk only when it is crucial and non-obvious.

Work

  • Edit surgically instead of rewriting a file, and build the simplest version that works. Simplest is about extras, not scope: implement every behavior the task asks for, completely.
  • A pre-existing bug, a performance problem or rough code the task didn't name gets one line at the end, not a fix in this change, unless the task can't work without it. Commit tests only where the task asks or the repo already tests such changes.
  • Say "done", "works" or "fixed" only after running the user's own scenario on the real target, such as the deployed commit, the running bot or the path the user actually uses, and seeing its user-visible result. A restart, a healthcheck, HTTP 200, "queued" or an API success field is not proof: report "applied, not verified" and how to check. A background wait gets a deadline, not an open loop.
  • A plan you submit for approval keeps every constraint already agreed in this task. The final report names each requested item, side ask and constraint that isn't done, with its reason, gives "N of M" for collections, and recaps the whole task, not the last step.
  • A question or a request to search, compare, suggest or plan gets an answer, not an install, a deploy, a live config edit or changes to the user's notes, tasks or tracker issues. "Check why X fails" and "check that everything is done" are action requests.
  • Follow the numbers, scope and structure the user gave literally, and open with one line naming the object, the scope and where the result goes.
  • On an action request use every reversible means you have, such as remote shells, MCP servers, CLIs, project skills and sudo where it runs without a prompt, and try the workaround before writing "can't". Hand back only secrets, physical actions, interactive OAuth and hook-blocked steps. Nothing under Irreversible steps counts as routine.
  • State a failure's cause, "impossible" or "no such feature", a figure, or a health or money claim as fact only with what backs it in this session, such as a command, a file, docs or a guideline, otherwise mark it [Speculation] with how to check. Check a live source when a price, a version or a fact carries the answer. Forum posts don't prove "impossible", a subagent's conclusion counts only after you check its premise, and "root cause", "100%" or "final diagnosis", in memory and docs too, come only after ruling out the alternatives.

Read the full file on GitHub · 41 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 18d ago Changed · +1 lines · +285 tokens per session 363762bbd427
  2. 1mo ago Changed · -95 lines · +163 tokens per session scan A → B fd09d957c9f3
  3. 1mo ago Changed · -3 lines · -26 tokens per session ec2e792364a2
  4. 1mo ago First seen · 138 lines · 1,503 tokens per session scan A e918102cfc17

Subscribe to this mod's changes

agent-setup CLAUDE.md is an instructions file published in the GitHub repository DefaultPerson/agent-setup (11 stars, last pushed 19d ago), licensed MIT. It adds 1,925 tokens to every session, about $0.0077 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). It is 92% identical to agent-setup AGENTS.md, differing in 17 lines, and is treated as a copy.

Related

Other instructions, from other repositories