Borrowing it
Nothing to install: this file belongs to miikkij/aimeat-protocol. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/miikkij/aimeat-protocol/main/CLAUDE.mdgit clone --depth 1 https://github.com/miikkij/aimeat-protocolWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/miikkij/aimeat-protocol/claude-md)<a href="https://agentmods.dev/instructions/miikkij/aimeat-protocol/claude-md"><img src="https://agentmods.dev/badge/instructions/miikkij/aimeat-protocol/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/miikkij/aimeat-protocol/claude-md"><img src="https://agentmods.dev/badge/instructions/miikkij/aimeat-protocol/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.10167 | $0.10167 |
| Opus 5.5 | $0.04067 | $0.04067 |
| Sonnet 5.5 | $0.02033 | $0.02033 |
| Haiku 4.5 | $0.01017 | $0.01017 |
Grade D, and why
aimeat-protocol CLAUDE.md scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLmediumData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
Tooling that has bitten before: the dev server does not watch backend `src/` (restart for a new route) · Playwright MCP needs `--isolated` and cannot use `file://` · **any** recursive delete follows a junction, `git work Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
Tooling that has bitten before: the dev server does not watch backend `src/` (restart for a new route) · Playwright MCP needs `--isolated` and cannot use `file://` · **any** recursive delete follows a junction, `git work Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **Never claim anything about prod without probing it.** `curl /v1/build` gives the `commit` that runs and `started_at`; `git merge-base --is-ancestor <fix> <commit>` says whether a fix is in it. Saying "you are on old How it starts
The opening of the file, as written. The whole thing — 260 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md: AIMEAT Protocol
What this is for
Read this before proposing anything. When a design question is genuinely open, these decide it, and every one of them has cost a rewrite when it was forgotten.
The goal is that people become AI-native. Success is someone doing their work through their own AI and finding the system worth having. Logging into a website to type into forms is the fallback, not the destination.
AI chat is the primary interface, and MCP is the preferred road in. The web is the machine room: it shows status and holds the controls that genuinely need a screen. So a capability reachable only by clicking is not finished. Design the chat path first, then the surface that shows what happened.
The data is refined knowledge the user brought and owns. Ownership is the product. That is why identity, consent and provenance are load-bearing rather than compliance overhead, and why a feature that erodes ownership is wrong even when it is convenient.
Agents are first-class users. They arrive through device authorization, the hello-integration flow and the aimeat-crewai liaison package, and an agent should be able to do what a person can do. An agent-shaped door added after the fact is a symptom that the feature was designed for a screen.
People's intelligences come from different vendors and arrive from different directions. The system's job is to let them share what they know without a migration and without a lock-in. Organisms, workspaces and skills exist for that.
Knowledge has a lifecycle. What matters stays relevant; what stopped mattering ages, gets marked, or is cleaned away. A store with no way to forget becomes what this project's own local memory became by 2026-08-09: 1.6 MB that loaded whether or not it applied. Any surface that accumulates knowledge needs an answer to "how does this go stale".
One more, from how this is sold rather than built: lead with what a person gets, not with the protocol.
The AIMEAT protocol (AI Memory Exchange and Action Transfer) and its reference implementation. Three parts:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · +54 tokens per session 219689776651
- 5d ago Changed · -4 tokens per session 33c4684a27f2
- 12d ago Changed · +2 lines · +67 tokens per session b9d85b46c323
- 16d ago Changed · -11 tokens per session 38cfbdbca87d
- 17d ago Changed · +24 tokens per session 32922543b059
- 18d ago Changed · +18 tokens per session 6fb6705eb2a0
- 20d ago Changed · +18 tokens per session 012418c77c09
- 22d ago Changed · -12 tokens per session 4378f50add57
- 25d ago Changed · +1 lines · +53 tokens per session abcbbe10db66
- 27d ago First seen · 257 lines · 9,960 tokens per session scan D e49b307486a2
aimeat-protocol CLAUDE.md is an instructions file published in the GitHub repository miikkij/aimeat-protocol (10 stars, last pushed today), licensed MIT. It adds 10,167 tokens to every session, about $0.0407 per session on Opus 5.5. A static security scan graded it D with 3 findings (sends data to an external url, recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
deno copilot-instructions.md
Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.