Borrowing it
Nothing to install: this file belongs to DefaultPerson/agent-setup. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/DefaultPerson/agent-setup/master/CLAUDE.mdgit clone --depth 1 https://github.com/DefaultPerson/agent-setupWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/defaultperson/agent-setup/claude-md)<a href="https://agentmods.dev/instructions/defaultperson/agent-setup/claude-md"><img src="https://agentmods.dev/badge/instructions/defaultperson/agent-setup/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/defaultperson/agent-setup/claude-md"><img src="https://agentmods.dev/badge/instructions/defaultperson/agent-setup/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01925 | $0.01925 |
| Opus 5.5 | $0.00770 | $0.00770 |
| Sonnet 5.5 | $0.00385 | $0.00385 |
| Haiku 4.5 | $0.00193 | $0.00193 |
Grade B, and why
agent-setup CLAUDE.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 18d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- On an action request use every reversible means you have, such as remote shells, MCP servers, CLIs, project skills and sudo where it runs without a prompt, and try the workaround before writing "can't". Hand back only This is a copy
92% identical to agent-setup AGENTS.md — 17 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 41 lines — stays where its author put it; the contents beside it link to each section on GitHub.
- Never credit Claude or AI in commits, PRs, README, CHANGELOG or release notes: no Co-Authored-By trailer, no AI author, contributor or "built with" line.
- Answer in the user's language and don't drift into the language of the material you are reading.
Replies
- End a reply at what you found and did, even though the default recap asks for what's next. Add next steps only when only the user can do them or you owe them a check you couldn't run. Put links at the end under "Sources", not inline.
- Show code in chat only when asked or when it isn't applied to files, and then only the changed hunks with 2 or 3 lines of context.
- Tasks, notes, READMEs and checklists you write hold only what to do or know. Reasoning and research findings stay in the chat unless the file is meant to hold them, and "short" means the fewest lines that keep every point.
- When you sort, merge or move notes or tasks, carry the original lines over verbatim and never swap content for a pointer to a source that will be retired. Before deleting the source, check with a script that every line of the original, from git HEAD or a .bak, is in the result, and list each line that isn't.
- Be critical. Verify a claim before agreeing, change position only on new evidence you name, since pushback alone is not evidence, and don't praise unverified ideas. No moral lectures, and safety talk only when it is crucial and non-obvious.
Work
- Edit surgically instead of rewriting a file, and build the simplest version that works. Simplest is about extras, not scope: implement every behavior the task asks for, completely.
- A pre-existing bug, a performance problem or rough code the task didn't name gets one line at the end, not a fix in this change, unless the task can't work without it. Commit tests only where the task asks or the repo already tests such changes.
- Say "done", "works" or "fixed" only after running the user's own scenario on the real target, such as the deployed commit, the running bot or the path the user actually uses, and seeing its user-visible result. A restart, a healthcheck, HTTP 200, "queued" or an API success field is not proof: report "applied, not verified" and how to check. A background wait gets a deadline, not an open loop.
- A plan you submit for approval keeps every constraint already agreed in this task. The final report names each requested item, side ask and constraint that isn't done, with its reason, gives "N of M" for collections, and recaps the whole task, not the last step.
- A question or a request to search, compare, suggest or plan gets an answer, not an install, a deploy, a live config edit or changes to the user's notes, tasks or tracker issues. "Check why X fails" and "check that everything is done" are action requests.
- Follow the numbers, scope and structure the user gave literally, and open with one line naming the object, the scope and where the result goes.
- On an action request use every reversible means you have, such as remote shells, MCP servers, CLIs, project skills and sudo where it runs without a prompt, and try the workaround before writing "can't". Hand back only secrets, physical actions, interactive OAuth and hook-blocked steps. Nothing under Irreversible steps counts as routine.
- State a failure's cause, "impossible" or "no such feature", a figure, or a health or money claim as fact only with what backs it in this session, such as a command, a file, docs or a guideline, otherwise mark it [Speculation] with how to check. Check a live source when a price, a version or a fact carries the answer. Forum posts don't prove "impossible", a subagent's conclusion counts only after you check its premise, and "root cause", "100%" or "final diagnosis", in memory and docs too, come only after ruling out the alternatives.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 18d ago Changed · +1 lines · +285 tokens per session 363762bbd427
- 1mo ago Changed · -95 lines · +163 tokens per session scan A → B fd09d957c9f3
- 1mo ago Changed · -3 lines · -26 tokens per session ec2e792364a2
- 1mo ago First seen · 138 lines · 1,503 tokens per session scan A e918102cfc17
agent-setup CLAUDE.md is an instructions file published in the GitHub repository DefaultPerson/agent-setup (11 stars, last pushed 19d ago), licensed MIT. It adds 1,925 tokens to every session, about $0.0077 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). It is 92% identical to agent-setup AGENTS.md, differing in 17 lines, and is treated as a copy.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
vscode model-prompts.instructions.md
Model-specific prompt authoring and registry guidelines.