Borrowing it
Nothing to install: this file belongs to imsaif/design-with-claude. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/imsaif/design-with-claude/main/CLAUDE.mdgit clone --depth 1 https://github.com/imsaif/design-with-claudeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/imsaif/design-with-claude/claude-md)<a href="https://agentmods.dev/instructions/imsaif/design-with-claude/claude-md"><img src="https://agentmods.dev/badge/instructions/imsaif/design-with-claude/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/imsaif/design-with-claude/claude-md"><img src="https://agentmods.dev/badge/instructions/imsaif/design-with-claude/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03201 | $0.03201 |
| Opus 5 | $0.01600 | $0.01600 |
| Sonnet 5 | $0.00640 | $0.00640 |
| Haiku 4.5 | $0.00320 | $0.00320 |
Grade A, and why
design-with-claude CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.
design-with-claude
Project Overview
V2 alpha live (April 2026): subscription product that configures Claude Code for designers via an MCP server, paired with a browser companion that renders command outputs live.
- Live web: https://www.designwithclaude.com (start at
/start) - npm package:
dwic-audit(run:npx dwic-audit). Older names@imrandwc/dwic+designwithclaudeare deprecated pointers to it — still owned, do not unpublish. Baredwicunscoped is unpublishable (npm typosquat filter vs swig/twig). - Persistence: Supabase (profiles + companion_events)
- See
PROGRESS.mdat the repo root for current state;00-product-brief.md+0{1,2,3,4}-*.mdon Desktop for the canonical plan.
V1 (still shipping): 40+ specialized design skills as Claude Code slash commands, available as a plugin or standalone. commands/*.md stays intact — the V2 MCP server reuses those files as role prompts.
Architecture
- V2 MCP server (root): TypeScript, ESM,
@modelcontextprotocol/sdkover stdio. Tools live insrc/tools/. Shared types insrc/tools/types.ts. Six structured output kinds: palette, type-scale, spacing, component-spec, copy, markdown. - V2 install flow:
npx dwic-audit setup --token=imr_xxx [--scope=user|project]writes the MCP entry. Usesclaude mcp add-jsonwhen available, falls back to direct~/.claude.jsonedit with timestamped backup, or.mcp.jsonat the cwd for project scope. - V2 gating: Pre-call
/api/gating/check, post-call/api/gating/consume. Fails open whenDWC_GATINGis off (dev/alpha default). - V2 events: Post-call emit to
/api/events. Payload shape defined insrc/api-client.ts→EventPayload. The browser companion (Phase 2) subscribes via Supabase Realtime. - V1 plugin (unchanged):
.claude-plugin/plugin.jsonmanifest;commands/*.mdare the knowledge base for both V1 slash commands and V2 MCP tool role prompts./design-briefis the master command.
Key Files
package.json(root) — npm packagedwic-audit, bins:dwic-audit→dist/bin/setup.js(thenpx dwic-auditentry — a dispatcher: bare/flag-first runs an audit,setup/uninstall/help/versionroute explicitly) +dwic-mcp-server→dist/server.js(MCP server, launched by the installed.mcp.jsonvianpx -p dwic-audit@<v> dwic-mcp-server)src/server.ts— MCP server main; registers all tools; wraps handlers with gating + event emissionsrc/tools/index.ts— tool registrysrc/tools/types.ts—ToolDefinition,ToolResult, output payload typessrc/tools/loadPrompt.ts— reads and cachescommands/*.mdrole promptssrc/bin/setup.ts—npx dwic-audit setupinstall flowscripts/test-mcp-handshake.mjs— stdio round-trip againstdist/server.js(npm run test:mcp)scripts/test-setup-dry-run.mjs— install/uninstall against a tmp project (npm run test:setup).claude-plugin/plugin.json— V1 plugin manifest (unchanged).claude-plugin/marketplace.json— V1 marketplace catalog (unchanged)commands/*.md— role prompts, shared by V1 slash commands and V2 MCP toolsREADME.md— V1 install + command reference (still current for the plugin path)web/— landing page; will become the V2 browser companion (Phase 2)web/lib/dwc/{types,tokens,store}.ts— shared types + in-memory store (Symbol.for singleton survives HMR) that Phase 3 will port to Supabaseweb/app/api/tokens/validate,web/app/api/gating/{check,consume},web/app/api/events,web/app/api/events/recent— dwc API stubs consumed by the MCP server and the Phase 2 companionweb/app/api/profile/route.ts— POST mintsimr_tokens + stores onboarding answers + returns generated CLAUDE.md; GET returns stored profileweb/app/{start,profile,install,companion,upgrade}/page.tsx— V2 companion flow pages (5 screens)web/components/companion/—Shell,CopyButton,StartWizard,CompanionView, plusrenderers/{Palette,TypeScale,Spacing,ComponentSpec,Copy,Markdown}Renderer.tsx+ barrelrenderers/index.tsxweb/lib/claude-md-generator.ts— extended withtone_preferencefor the V2 flowweb/lib/dwc/supabase.ts— lazy service_role Supabase client (server-side only; RLS blocks anon)web/lib/dwc/store.ts— async store; dispatches to Supabase whenDWC_SUPABASE_URL+DWC_SUPABASE_SERVICE_ROLE_KEYare set, in-memory Map fallback otherwiseweb/supabase/{schema.sql,SETUP.md}— schema + 5-step user setup doc for Supabase project + Vercel env
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 161 lines · 3,201 tokens per session scan A af48f40e4829
design-with-claude CLAUDE.md is an instructions file published in the GitHub repository imsaif/design-with-claude (11 stars, last pushed 19d ago), licensed MIT. It adds 3,201 tokens to every session, about $0.0160 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
deepseek-harness AGENTS.md
AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.