Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/dmelo/claude-code-stats/claude-mdgit clone --depth 1 https://github.com/dmelo/claude-code-statsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01669 | $0.01669 |
| Opus 5 | $0.00834 | $0.00834 |
| Sonnet 5 | $0.00334 | $0.00334 |
| Haiku 4.5 | $0.00167 | $0.00167 |
Grade C, and why
claude-code-stats CLAUDE.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
rm -rf /Applications/ClaudeCodeStats.app How it starts
The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md
Project Overview
ClaudeCodeStats is a native macOS menu bar app (SwiftUI) that shows Claude Code usage limits, Claude service health status, and CLI version update notifications.
Build
cd ClaudeCodeStats
xcodebuild -scheme ClaudeCodeStats -configuration Release build
The built .app is in ~/Library/Developer/Xcode/DerivedData/ClaudeCodeStats-<hash>/Build/Products/Release/.
Resolve that path explicitly — never with a ClaudeCodeStats-* glob. Xcode keeps a
separate DerivedData directory per project location, and stale ones are not cleaned up. When
more than one exists the glob expands to all of them, so cp -R src1 src2 /Applications/
copies the fresh build and then overwrites it with the stale one, exit 0 and no warning —
you end up debugging a binary that is weeks old. ls -dt does not save you either: it sorts
by directory mtime, which a previous cp will have touched. The last line xcodebuild prints
(lsregister -f -R -trusted <path>) names the directory it actually built into.
To install locally:
# Take the path from xcodebuild's own output, or pick by the *binary's* mtime:
APP=$(ls -dt ~/Library/Developer/Xcode/DerivedData/ClaudeCodeStats-*/Build/Products/Release/ClaudeCodeStats.app/Contents/MacOS/ClaudeCodeStats \
| head -1 | sed 's#/Contents/MacOS/ClaudeCodeStats##')
echo "installing from: $APP" # sanity-check this before continuing
# Kill running instance, copy to /Applications, relaunch
pkill -x ClaudeCodeStats; sleep 0.5
rm -rf /Applications/ClaudeCodeStats.app
cp -R "$APP" /Applications/ClaudeCodeStats.app
open /Applications/ClaudeCodeStats.app
If a change you just made doesn't show up, check this first: a rendered colour or string that exists nowhere in the source tree means you are not running the tree.
There are no tests or linters configured, so verifying a change means running the app and looking at it. Three non-obvious traps when doing that from a shell:
- Launch with
open, never&. A.appstarted as"$BINARY" &from a Bash tool dies when that shell returns, often mid-work —open /Applications/ClaudeCodeStats.apphands it to LaunchServices so it survives. To time a scan or wait on a side effect, poll the artifact (until [ -f "$cost_cache" ]; do sleep 2; done), don't hold the process open. - Instrument to a file, not stderr. A menu bar app has no attached terminal, and one you'll
pkillloses buffered stdout/stderr — write debug lines to a file (/tmp/…) andcatit after. - AppleScript can't open the MenuBarExtra popover (
click menu bar item …does nothing). To inspect a view in a specific state or appearance without the running app, compile the real views into a standaloneImageRendererharness and render at a chosen\.colorScheme+ sample data (swiftc main.swift Theme.swift Models.swift Views/*.swift— top-level code needs the file namedmain.swift). It renders everything exceptScrollViewcontent, which comes back blank.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 97 lines · 1,669 tokens per session scan C 142dded34170
claude-code-stats CLAUDE.md is an instructions file published in the GitHub repository dmelo/claude-code-stats (23 stars, last pushed 11d ago), licensed MIT. It adds 1,669 tokens to every session, about $0.0083 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
Usage4Claude CLAUDE.md
Instructions for f-is-h/Usage4Claude, covering usage4claude — project overview, build & test, architecture map, key conventions and known pitfalls.
claude-code-monitor CLAUDE.md
Instructions for vincequant/claude-code-monitor, covering claude.md, architecture, commands, run monitor and direct execution.
mcp-server-excel coverage-prevention-strategy.instructions.md
Instructions for sbroenne/mcp-server-excel, covering generated surface coverage, contract change workflow, required checks and common incomplete changes.
my-claude-code-setup GEMINI.md
Instructions for centminmod/my-claude-code-setup, covering gemini.md, ai guidance, memory bank system, core context files and project overview.
moonproxy-desktop AGENTS.md
Instructions for MoonProxyHQ/moonproxy-desktop, covering moonproxy, 功能, 技术栈, 目录结构 and 配置与数据存储.
cship CLAUDE.md
Instructions for stephenleo/cship, covering cship — ai agent instructions, environment quirks, non-negotiable code patterns, before submitting a pr and project structure.