Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/loopdive/js2/claude-mdgit clone --depth 1 https://github.com/loopdive/js2What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.21295 | $0.21295 |
| Opus 5 | $0.10648 | $0.10648 |
| Sonnet 5 | $0.04259 | $0.04259 |
| Haiku 4.5 | $0.02130 | $0.02130 |
Grade B, and why
js2 CLAUDE.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
- **Pull-time budget/parallelism awareness (#2751)**: before claiming, run `node scripts/budget-status.mjs --pick`. It reports the **remaining token budget**, the current **parallelism** (active agents), the **per-agent How it starts
The opening of the file, as written. The whole thing — 761 lines — stays where its author put it; the contents beside it link to each section on GitHub.
js2wasm
TypeScript-to-WebAssembly compiler using WasmGC.
Answering style
Be concise. Lead with the answer, then only the context needed to act on it.
- No repetition. Do not restate the question, re-explain what you just did, or repeat a caveat you already gave. If it was said earlier in the session, a pointer is enough.
- No long prose. Prefer a sentence or a short list over a paragraph, and a table over a list when comparing. Cut throat-clearing and summaries of summaries.
- Match the question's size. A yes/no question gets a yes/no plus the one fact that makes it actionable, not a status report.
- Introduce terminology with a quick example. The first time a term of
art appears in an answer (demote, claim, merge-queue park, CPS, …), attach a
one-line concrete example of what it means — e.g. "the selector demotes
the function (a
**operator makes it fall back to the legacy compiler instead of erroring)". A term the reader has to reverse-engineer costs more than the sentence that grounds it. - Brevity is about redundancy, not omission. Findings that change what someone would do — a real failure, an unverified assumption, work deliberately left out — still get stated plainly. Say them once, in the fewest words that keep them accurate.
- Plain language to the stakeholder. No jargon, no empty phrases, gist first. Internal codenames, gate names, and spec terms only when the reader needs to act on them — then with a one-line gloss.
Hooks and ratchet gates — never skipped, always before the commit
Never pass --no-verify to git commit or git push (project-lead order,
2026-08-22). The pre-commit and pre-push hooks are the last check that runs on a
human timescale; skipping them moves every failure into CI, where a red gate
costs a full cycle plus a branch re-sync. If a hook is slow, use the sanctioned
SKIP_SLOW_PRECOMMIT=1 (which still runs the fast checks) and run the heavy
gates by hand — do not disable the hook.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 761 lines · 21,295 tokens per session scan B 8891ae781097
js2 CLAUDE.md is an instructions file published in the GitHub repository loopdive/js2 (59 stars, last pushed yesterday), licensed Apache-2.0. It adds 21,295 tokens to every session, about $0.1065 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
oxc AGENTS.md
Instructions for oxc-project/oxc, covering agents.md - ai assistant guide for oxc, ai usage policy for contributors, repository structure, core crates and development commands.
oxc copilot-instructions.md
Instructions for oxc-project/oxc: When reviewing pull requests in this repository.
oxc CLAUDE.md
Instructions for oxc-project/oxc, a project described as: ⚓ A collection of high-performance JavaScript tools.
deno copilot-instructions.md
Instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.
deno CLAUDE.md
Instructions for denoland/deno, covering deno development guide, git workflow, high level overview, key directories and quick start.
page-agent AGENTS.md
Instructions for alibaba/page-agent, covering instructions for coding assistants, project overview, development commands, architecture and monorepo structure.