Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/msapps-mobile/claude-plugins/claude-mdgit clone --depth 1 https://github.com/MSApps-Mobile/claude-pluginsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00556 | $0.00556 |
| Opus 5 | $0.00278 | $0.00278 |
| Sonnet 5 | $0.00111 | $0.00111 |
| Haiku 4.5 | $0.00056 | $0.00056 |
Grade C, and why
claude-plugins CLAUDE.md scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Enumerates the file system for secretshighData exfiltration
Searching home directories for .env, .ssh, .aws or credential files is reconnaissance for credential theft.
candidates = glob.glob('/sessions/*/mnt/Claude/credentials/cowork-gdrive-config.json') Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
**Problem:** The Cowork VM proxy blocks outbound connections to `script.google.com`. Running `curl` or `requests` from inside the VM to the Google Apps Script upload endpoint fails with `403 Forbidden / X-Proxy-Error: bl How it starts
The opening of the file, as written. The whole thing — 68 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md — claude-plugins
Developer notes for the MSApps Claude Plugins repository.
Repo Structure
plugins/
{plugin-name}/
README.md
CONNECTORS.md
skills/{skill-name}/
SKILL.md
references/
commands/
{command}.md
Known Issues & Fixes
session-backup: VM Proxy Blocks Google Drive Uploads
Problem: The Cowork VM proxy blocks outbound connections to script.google.com. Running curl or requests from inside the VM to the Google Apps Script upload endpoint fails with 403 Forbidden / X-Proxy-Error: blocked-by-allowlist.
Fix (as of 2026-03-27): Upload must run on the Mac side via Desktop Commander:
- Copy zip files from
/tmp/cowork-backup/to{SESSION_MNT}/Claude/.backup-tmp/(mounted Mac folder) - Write a Python upload script to the staging dir
- Use
mcp__Desktop_Commander__start_processto runpython3 ~/Documents/Claude/.backup-tmp/do_upload.pyon the Mac - Clean up staging dir after upload
See plugins/session-backup/skills/session-backup/SKILL.md Step 4 for full implementation.
session-backup: Hardcoded Session Paths Break Between Runs
Problem: Cowork VM session names (e.g. loving-gracious-allen, modest-sleepy-carson) are randomly generated and change with every new session. Any hardcoded path like /sessions/loving-gracious-allen/mnt/... will fail in a different session.
Fix (as of 2026-03-27): Always discover the active session dynamically:
import glob
candidates = glob.glob('/sessions/*/mnt/Claude/credentials/cowork-gdrive-config.json')
session_mnt = candidates[0].replace('/Claude/credentials/cowork-gdrive-config.json', '')
Rule: Never hardcode a session name in any skill or scheduled task prompt.
Deployment
Plugins are published via:
- GitHub:
MSApps-Mobile/claude-plugins(this repo) - Marketplace: Listed in Anthropic Claude plugin marketplace
To install from this repo in Cowork:
Settings → Plugins → Marketplaces → Add →
MSApps-Mobile/claude-plugins
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 68 lines · 556 tokens per session scan C 5b5788e68105
claude-plugins CLAUDE.md is an instructions file published in the GitHub repository MSApps-Mobile/claude-plugins (9 stars, last pushed 7d ago), licensed MIT. It adds 556 tokens to every session, about $0.0028 per session on Opus 5. A static security scan graded it C with 2 findings (enumerates the file system for secrets, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
Sponsio CLAUDE.md
Instructions for SponsioLabs/Sponsio, covering agent guide for sponsio, what sponsio is, positioning, what to read first and repository map.
VaultysClaw CLAUDE.md
Instructions for vaultys/VaultysClaw, covering claude.md, commands, development, demo / simulator and build.
orloj CLAUDE.md
Instructions for OrlojHQ/orloj, covering orloj claude instructions, critical repository rules and implementation notes.
benai-skills CLAUDE.md
Instructions for naveedharri/benai-skills, covering benai skills - expert automation, what this is, available departments, marketing (12 skills) and benai sales (14 skills).
agent-plugins-skills copilot-instructions.md
Instructions for richfrem/agent-plugins-skills, covering copilot instructions for agent-plugins-skills, 1. think before coding, 2. simplicity first, 3. surgical changes and 4. goal-driven execution.
sint-protocol AGENTS.md
Instructions for sint-ai/sint-protocol, covering sint protocol — ai agent guide, what this repo does, key invariants (never violate these), quick orientation and package dependency graph.