skills: Instructions file for Claude Code

CLAUDE.md

skills CLAUDE.md is an instructions file for Claude Code from linggen/skills. It costs 1,078 tokens per session, scanned A, original, Apache-2.0.

Repository instructions for maintaining Linggen skills across three synchronized locations: the source repository, the running daemon’s skills folder, and a vendored copy.

In plain words
What is it for?
Use them when editing Linggen skills, checking JavaScript syntax, reloading skills, or updating the vendored repository pointer.
Why use it?
They explain which copy to edit, how to keep versions identical, and how changes become available to the running app.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md. Also seen: mentions Claude Code.

This is linggen/skills's own configuration. It tells Claude Code how to work on skills itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything skills configures →

Reuse

Borrowing it

Nothing to install: this file belongs to linggen/skills. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/linggen/skills/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/linggen/skills

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for skills CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/linggen/skills/claude-md/github.svg)](https://agentmods.dev/instructions/linggen/skills/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/linggen/skills/claude-md"><img src="https://agentmods.dev/badge/instructions/linggen/skills/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for skills CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/linggen/skills/claude-md"><img src="https://agentmods.dev/badge/instructions/linggen/skills/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,078 This file is loaded in full into every session.
When invoked 1,078 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01078 $0.01078
Opus 5.5 $0.00431 $0.00431
Sonnet 5.5 $0.00216 $0.00216
Haiku 4.5 $0.00108 $0.00108

Measured 14d ago against content hash 03113fd95964, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

skills CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 35 lines

How it starts

The opening of the file, as written. The whole thing — 35 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Claude Code Instructions

This is the Linggen skills repository — the standalone source of truth for the skills that ship with Linggen. Most are app skills (SKILL.md + a web UI under scripts/ served at /apps/<name>/).

Edit workflow — three synced surfaces

Edit HERE first, commit and push, then bring the other two surfaces up to that commit:

  1. skills/<name>/… — this repo (standalone source of truth)
  2. ~/.linggen/skills/<name>/… — what the running daemon serves. Install ONLY with scripts/install-skill.sh <name> after pushing — never copy files by name. It installs the whole skill from origin/main (--ref HEAD for a local commit), refuses if any JS fails node --check or imports a name its neighbour doesn't export, never touches user state, and reloads skills when SKILL.md changed (then a NEW chat to bind). Page changes: reload the app iframe. --check shows drift (prunable vs untracked extras); --dry-run what would change. Prune (default; --no-prune skips): removes an install file only if it's gone from the ref, was once tracked under <skill>/, is byte-identical to a blob git held, and isn't user state — never-tracked or edited files stay.
  3. linggen/linggen-app/vendor/skills — git submodule of this repo. After pushing here: git pull origin main inside the submodule, then commit the pointer bump in linggen-app.

Never edit ~/.linggen or vendor/skills directly.

Never rsync --delete (or rm-and-copy) into ~/.linggen/skills/<name>/ — the install holds user state git never has (config.json, data/, state/). One such sync on 2026-09-10 wiped Pulse's config and six skills' data; copying by name blanked Lingjing twice on 2026-09-25 (a file landed without the neighbour it imports). install-skill.sh exists for both.

Conventions

  • Syntax-check JS with node --check before committing (install-skill.sh refuses otherwise); there is no build step — files are served as-is.
  • Live-check Lingjing with ?save=test; never open the plain page in a check.
  • Before committing: ./scripts/check.sh (CI runs the same on every push) — or piecemeal, node --test tests/*.test.mjs at the repo root (every SKILL.md frontmatter in the engine's shape; every script parses, every .sh passes bash -n, every page's local assets exist), plus the skill's own node --test <skill>/tests/*.test.mjs.
  • Skill JS runs in a sandboxed iframe: no window.confirm/prompt (silent no-ops in the app shell) — use the shared dialog helpers.
  • Files written via /api/bash must end with a trailing newline (sentinel-strip gotcha).
  • Chat panels mount through the engine's /shared/chat-bridge.js (LinggenUI.mount); sessions, models and cloud calls come from /shared/api.js, and /shared/app-mode.js drives the shell's Settings overlay. Don't copy these into a skill — keep only calls that are the skill's own in a local module (pulse-api.js, memory-api.js). App pages get ?app_mode=1, and &in_launcher=1 when hosted inside the unified launcher.
  • Don't trust the model for mechanical invariants (ids, schema fields, timestamps) — derive them page-side at ingest.
  • Tool cmd: template args keep their position: an omitted (or null) arg becomes its declared default:, else an empty quoted word '' — so a script reads empty as "not given" and defaults it itself. Only a placeholder whose name isn't declared under args: survives literally ({{max}}); declare every placeholder.
  • Never sq() a path containing $HOME — single quotes kill expansion, and the command then writes to a literal '$HOME' dir under the bash cwd instead of failing. Resolve the home dir once via home() (bash.js) and build absolute paths (this silently ate every DJ thumbnail until 2026-08-04).

Read the full file on GitHub · 35 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 14d ago Changed · +6 lines · +141 tokens per session 03113fd95964
  2. 21d ago Changed · +1 lines · +62 tokens per session a0f19d933bd7
  3. 28d ago Changed · +19 tokens per session 55f65f021ab2
  4. 1mo ago Changed · +1 lines · +19 tokens per session 47aa793c00dc
  5. 1mo ago Changed · +1 lines · +252 tokens per session 2d971085d666
  6. 1mo ago Changed · +2 lines · +74 tokens per session c5883370f576
  7. 2mo ago First seen · 24 lines · 511 tokens per session scan A 43772121fbfe

Subscribe to this mod's changes

skills CLAUDE.md is an instructions file published in the GitHub repository linggen/skills (3 stars, last pushed 2d ago), licensed Apache-2.0. It adds 1,078 tokens to every session, about $0.0043 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

skills CLAUDE.md compared with instructions from other repositories

skills CLAUDE.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
skills CLAUDE.mdlinggen/skillsInstructions file32d agoApache-2.0A1,078Claude Code
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode