LogLead: Instructions file for Claude Code

CLAUDE.md

LogLead CLAUDE.md is an instructions file for Claude Code from EvoTestOps/LogLead. It costs 1,065 tokens per session, scanned A, original, MIT.

Repository instructions for LogLead, a Python library that tests methods for detecting unusual patterns in computer logs. They explain the project, setup, commands, architecture, and important links to related projects.

In plain words
What is it for?
Use them when setting up LogLead, running its commands, changing loaders, log-processing methods, or anomaly detectors, and checking how changes may affect LogDelta or VisualLogAnalyzer.
Why use it?
They give coding agents the project context and working rules needed to make changes without misunderstanding its data format, environment, or public interfaces.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md. Also seen: mentions CLAUDE.md.

This is EvoTestOps/LogLead's own configuration. It tells Claude Code how to work on LogLead itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything LogLead configures →

Reuse

Borrowing it

Nothing to install: this file belongs to EvoTestOps/LogLead. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/EvoTestOps/LogLead/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/EvoTestOps/LogLead

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for LogLead CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/evotestops/loglead/claude-md/github.svg)](https://agentmods.dev/instructions/evotestops/loglead/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/evotestops/loglead/claude-md"><img src="https://agentmods.dev/badge/instructions/evotestops/loglead/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for LogLead CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/evotestops/loglead/claude-md"><img src="https://agentmods.dev/badge/instructions/evotestops/loglead/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,065 This file is loaded in full into every session.
When invoked 1,065 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01065 $0.01065
Opus 5.5 $0.00426 $0.00426
Sonnet 5.5 $0.00213 $0.00213
Haiku 4.5 $0.00106 $0.00106

Measured 1mo ago against content hash a32c29d98e04, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

LogLead CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 46 lines

How it starts

The opening of the file, as written. The whole thing — 46 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

Guidance for coding agents working in this repo.

LogLead (Log Loader, Enhancer, Anomaly Detector): benchmarks log anomaly detection algorithms/ representations via ~10 dataset loaders, log representation enhancers, and anomaly detection classifiers, independently swappable. Also used as a backend library by sibling projects LogDelta and VisualLogAnalyzer — changes to public APIs in loglead/ can affect them. Data is Polars DataFrames throughout (not Pandas).

Build & Test

  • Python 3.9–3.12 via uv. uv run <script> syncs env and installs loglead editable — no separate install step.
  • .env (LOG_DATA_PATH) only needed for "bring your own full dataset" scripts; quick demos use bundled sample parquet files instead.
  • LOG_DATA_PATH (.env) and root_folder (dataset YAML config) are independent, unlinked settings — keeping them in sync is on you.
  • Smoke tests: uv run demo/HDFS_samples.py, uv run demo/TB_samples.py.
  • Full suite (downloads real datasets, ~30 min): uv run tests/main.py, chaining downloader/download_data.py then tests/loaders.py / enhancers.py / anomaly_detectors.py. Plain scripts, not pytest — read console output for MISMATCH!/errors. Run a stage directly to iterate once its input parquet exists in <root_folder>/test_data/. Other dataset families via --config tests/datasets_*.yml.
  • uv run tests/log_file_detection.py --config <cfg> — checks AutoLoader format detection without loading full data; covers datasets too large to load.
  • MCP server tests (needs uv sync --extra mcp): uv run tests/mcp/server.py; perf grid: uv run tests/mcp/benchmark.py (see tests/mcp/PERFORMANCE.md).
  • Downloader: uv run downloader/download_data.py [--config <cfg>]. Full set ~7GB download / ~104GB unzipped — check disk space first.
  • No linter, formatter, or CI configured — don't invent one unless asked.

Core Architecture

Pipeline: Loader → Enhancer → AnomalyDetector, connected via Polars DataFrames with a shared column-naming convention:

  • m_* — raw columns from a Loader (e.g. m_message, m_timestamp).
  • e_* — event-level columns from EventLogEnhancer (e.g. e_words, e_event_drain_id).
  • seq_* / unprefixed — sequence-level columns from SequenceEnhancer.
  • normal/anomaly — boolean labels; BaseLoader.add_ano_col() derives whichever is missing.

Read the full file on GitHub · 46 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · -27 tokens per session a32c29d98e04
  2. 1mo ago Changed · +1 lines · +13 tokens per session 38fd6dc0e5e8
  3. 1mo ago Changed · +1 lines · +75 tokens per session aa854b3ddfd8
  4. 1mo ago Changed · -495 lines · -9,156 tokens per session fc7853462928
  5. 2mo ago Changed · +8 lines · +186 tokens per session 16a690a8a312
  6. 2mo ago First seen · 531 lines · 9,974 tokens per session scan A fbcfce744d7e

Subscribe to this mod's changes

LogLead CLAUDE.md is an instructions file published in the GitHub repository EvoTestOps/LogLead (33 stars, last pushed 1mo ago), licensed MIT. It adds 1,065 tokens to every session, about $0.0043 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

LogLead CLAUDE.md compared with instructions from other repositories

LogLead CLAUDE.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
LogLead CLAUDE.mdEvoTestOps/LogLeadInstructions file331mo agoMITA1,065Claude Code
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA5,649GitHub Copilot
langchain AGENTS.mdlangchain-ai/langchainInstructions file149ktodayMITA4,680Codex, OpenCode
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA3,093GitHub Copilot
vscode ai-customization.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA1,907GitHub Copilot