Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/knowns-dev/knowns/claude-mdgit clone --depth 1 https://github.com/knowns-dev/knownsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01788 | $0.01788 |
| Opus 5 | $0.00894 | $0.00894 |
| Sonnet 5 | $0.00358 | $0.00358 |
| Haiku 4.5 | $0.00179 | $0.00179 |
Grade C, and why
knowns CLAUDE.md scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
<!-- rtk-instructions v2 --> Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
rtk curl <url> # Compact HTTP responses (70%) How it starts
The opening of the file, as written. The whole thing — 178 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE
Compatibility entrypoint for runtimes that auto-detect CLAUDE.md.
CRITICAL: Start with Knowns MCP initial when available. Use help("tool.*") or help("workflow.*") for domain details on demand.
Runtime Guidance
- Knowns is the repository memory layer for humans and the AI-friendly working layer for agents.
- MCP
initialis the primary AI bootstrap: project state, tool domains, code rules, and workflow routing. - MCP
helpis the primary on-demand source for action schemas and recipes. - Treat this file only as a lightweight compatibility entrypoint.
Minimum Rules
- Use Knowns as the canonical system for tasks, docs, templates, and workflow state.
- Never manually edit Knowns-managed task or doc markdown.
- Search first, then read only relevant docs and code.
- Use
searchfor discovery; use MCPretrievetool when a workflow needs structured context with citations. Fall back to CLIknowns retrieveif MCP is unavailable. - For code operations, use
codetool:find/symbolsfor structure,references/definitionfor navigation,rename/replace/replace_body/insert/deletefor editing. Usehelp("code.*")orhelp("workflow.code-edit")for details. - Plan before implementation unless the user explicitly overrides that workflow.
- Validate before considering work complete.
- Use memory tools:
memory({ action: "list" })at session start,memory({ action: "add" })after tasks for reusable knowledge. - Proactively capture durable memory when scope and durability are clear.
Quick Reference
knowns doc list --plain # List docs
knowns task list --plain # List tasks
knowns task <id> --plain # View task
knowns doc "<path>" --plain --smart # View doc
knowns search "query" --plain # Search docs/tasks
knowns retrieve "query" --json # Retrieve structured context pack (CLI fallback)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 178 lines · 1,788 tokens per session scan C 6febedc1feac
knowns CLAUDE.md is an instructions file published in the GitHub repository knowns-dev/knowns (241 stars, last pushed 6d ago), licensed MIT. It adds 1,788 tokens to every session, about $0.0089 per session on Opus 5. A static security scan graded it C with 2 findings (hidden instructions, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
claude-context-os CLAUDE.md
Instructions for Arkya-AI/claude-context-os, covering claude.md, session start, identity, rules and where things live.
claude-code-bridge CLAUDE.md
Claude Code instructions for harshitleads/claude-code-bridge, covering claude.md, vision and mission, current stack, architecture and code rules.
open-ontologies CLAUDE.md
Instructions for fabio-rovai/open-ontologies, covering open ontologies, ontology engineering workflow, generate, validate and load and reason.
vibe-coding-prompt-template backend.instructions.md
Instructions for KhazP/vibe-coding-prompt-template: Read AGENTS.md, agentdocs/techstack.md, and agentdocs/codepatterns.md.
kin GEMINI.md
Instructions for firelock-ai/kin, covering kin: read the repository from the graph, pick the tool by what you know, trust the envelope, not the emptiness, if the tools have no graph and a working order.
kin AGENTS.md
Instructions for firelock-ai/kin, covering agents.md and this repo's role.