claude-skills: Instructions file for Claude Code

CLAUDE.md

claude-skills CLAUDE.md is an instructions file for Claude Code from Jeffallan/claude-skills. It costs 3,263 tokens per session, scanned A, original, MIT.

Project instructions for creating and maintaining Claude skills, which are reusable instruction sets for an AI coding assistant. They define description, frontmatter, and reference-file standards.

In plain words
What is it for?
Use them when configuring the claude-skills project, writing skill descriptions, checking required metadata, or preparing reference files.
Why use it?
They prevent skill descriptions from hiding important instructions by putting workflow steps in the wrong place.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md. Also seen: mentions .claude-plugin.

This is Jeffallan/claude-skills's own configuration. It tells Claude Code how to work on claude-skills itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything claude-skills configures →

About the project

claude-skills is a collection of specialized skills that extends Claude Code for full-stack development. Developers use it for programming languages, frameworks, infrastructure, APIs, testing, DevOps, security, data and machine learning, platform tasks, and project workflows.

Jeffallan/claude-skills · 12,008 stars · on GitHub

Reuse

Borrowing it

Nothing to install: this file belongs to Jeffallan/claude-skills. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/Jeffallan/claude-skills/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/Jeffallan/claude-skills

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for claude-skills CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/jeffallan/claude-skills/claude-md/github.svg)](https://agentmods.dev/instructions/jeffallan/claude-skills/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/jeffallan/claude-skills/claude-md"><img src="https://agentmods.dev/badge/instructions/jeffallan/claude-skills/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for claude-skills CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/jeffallan/claude-skills/claude-md"><img src="https://agentmods.dev/badge/instructions/jeffallan/claude-skills/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 3,263 This file is loaded in full into every session.
When invoked 3,263 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.03263 $0.03263
Opus 5.5 $0.01305 $0.01305
Sonnet 5.5 $0.00653 $0.00653
Haiku 4.5 $0.00326 $0.00326

Measured 19d ago against content hash df32b21824f9, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

claude-skills CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 19d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

CLAUDE.md · 356 lines

How it starts

The opening of the file, as written. The whole thing — 356 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Claude Skills Project Configuration

This file governs Claude's behavior when working on the claude-skills repository.


Skill Authorship Standards

Skills follow the Agent Skills specification. This section covers project-specific conventions that go beyond the base spec.

The Description Trap

Critical: Never put process steps or workflow sequences in descriptions. When descriptions contain step-by-step instructions, agents follow the brief description instead of reading the full skill content. This defeats the purpose of detailed skills.

Brief capability statements (what it does) and trigger conditions (when to use it) are both appropriate. Process steps (how it works) are not.

BAD - Process steps in description:

description: Use for debugging. First investigate root cause, then analyze
patterns, test hypotheses, and implement fixes with tests.

GOOD - Capability + trigger:

description: Diagnoses bugs through root cause analysis and pattern matching.
Use when encountering errors or unexpected behavior requiring investigation.

Format: [Brief capability statement]. Use when [triggering conditions].

Descriptions tell WHAT the skill does and WHEN to use it. The SKILL.md body tells HOW.


Frontmatter Requirements

Per the Agent Skills specification, only name and description are top-level required fields. Custom fields go under metadata.

---
name: skill-name-with-hyphens
description: [Brief capability statement]. Use when [triggering conditions] - max 1024 chars
license: MIT
metadata:
  author: https://github.com/Jeffallan
  company: https://synergetic.solutions
  version: "1.0.0"
  domain: frontend
  triggers: keyword1, keyword2, keyword3
  role: specialist
  scope: implementation
  output-format: code
  related-skills: fullstack-guardian, test-master, devops-engineer
---

Top-level fields (spec-defined):

  • name: Letters, numbers, and hyphens only (no parentheses or special characters)
  • description: Maximum 1024 characters. Capability statement + trigger conditions. No process steps.
  • license: Always MIT for this project
  • allowed-tools: Space-delimited tool list (only on skills that restrict tools)

Read the full file on GitHub · 356 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 19d ago Changed · +44 lines · +675 tokens per session df32b21824f9
  2. 1mo ago First seen · 312 lines · 2,588 tokens per session scan A bc08b9c87612

Subscribe to this mod's changes

claude-skills CLAUDE.md is an instructions file published in the GitHub repository Jeffallan/claude-skills (12,008 stars, last pushed yesterday), licensed MIT. It adds 3,263 tokens to every session, about $0.0131 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,649 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,549 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,731 tokens

deno copilot-instructions.md

Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.

denoland/deno · 3,077 tokens