Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/janmaaarc/basecamp/claude-mdgit clone --depth 1 https://github.com/janmaaarc/basecampWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.02252 | $0.02252 |
| Opus 5 | $0.01126 | $0.01126 |
| Sonnet 5 | $0.00450 | $0.00450 |
| Haiku 4.5 | $0.00225 | $0.00225 |
Grade A, and why
basecamp CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 164 lines — stays where its author put it; the contents beside it link to each section on GitHub.
@RTK.md @rules/karpathy.md @rules/security.md
Rule priority: security rules override simplicity rules. When they conflict, default to the secure choice.
About You
- I build [e.g. AI agents, web apps, automation tools]
- Stack: [e.g. Next.js, Python, Supabase, Node.js]
- I value production-ready code over quick hacks.
Your Defaults
- Package manager: [npm / pnpm / yarn / pip]
- Auth: [Supabase Auth / Clerk / NextAuth]
- Styling: [Tailwind / CSS Modules]
- Deployment: [Vercel / Railway / Fly.io]
- Icons: [Lucide / Heroicons]
Frontend
- Run
/impeccable auditand/impeccable polishbefore shipping any UI. (Requires the impeccable plugin — remove this line if not installed.) - No inline styles. Use your CSS framework of choice.
Coding Rules
- Keep files modular.
- Keep files under 800 lines. At 800+, flag it and propose a split by responsibility (e.g. utils, hooks, sub-components) before adding more code. Never exceed 1,000 lines.
- Never introduce breaking changes without explaining why.
- No external libraries unless nothing installed works.
- Use the project dependency file for correct versions. Never assume latest.
- Keep a
.env.examplewith every required var (names only, no values). Add, edit, or remove vars there whenever code changes require it, no need to ask each time. Never commit.env. If a project's.gitignorehas a blanket.env*rule, add!.env.exampleso the template itself isn't excluded. - Comments: one line only. Explain why, not what. Example:
// retry here because Stripe webhooks fire twice on timeout - Markdown files: kebab-case names (e.g. my-notes.md). Conventional root and meta docs keep their established uppercase names:
README.md,CHANGELOG.md,CLAUDE.md,LICENSE, and the project memory files (PROJECT.md,MISTAKES.md,CONTRACT.md,REQUIREMENTS.md). - Watch for obvious bugs proactively.
- When sweeping for a pattern, enumerate the full set present and diff against the allowed set. Don't grep only for instances already suspected.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 164 lines · 2,252 tokens per session scan A 7097e415dbf1
basecamp CLAUDE.md is an instructions file published in the GitHub repository janmaaarc/basecamp (7 stars, last pushed 23d ago), licensed MIT. It adds 2,252 tokens to every session, about $0.0113 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
cocoindex AGENTS.md
AGENTS.md instructions for cocoindex-io/cocoindex, covering agents.md, build and test commands, building, testing and code formatting and linting.
apm architecture.instructions.md
Single canonical owner discipline: one authority per durable decision, guarded by a regression test + a static boundary check.
apm python.instructions.md
Python development guidelines.
framework AGENTS.md
Instructions for ai-driven-dev/framework, covering agents.md, behavior, communication, action and memory management.
packmind packmind-frontend-error-management.instructions.md
Instructions for PackmindHub/packmind: A global error boundary is already configured at the root level (in root.tsx) that automatically catches all page crashes, 404s, and loader failures. This standard defines when and how to use explicit... .
Commit Message
Comprehensive Conventional Commits guidelines for openwebui-extensions.