Borrowing it
Nothing to install: this file belongs to newsnowlabs/dockside. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/newsnowlabs/dockside/main/CLAUDE.mdgit clone --depth 1 https://github.com/newsnowlabs/docksideWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/newsnowlabs/dockside/claude-md)<a href="https://agentmods.dev/instructions/newsnowlabs/dockside/claude-md"><img src="https://agentmods.dev/badge/instructions/newsnowlabs/dockside/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/newsnowlabs/dockside/claude-md"><img src="https://agentmods.dev/badge/instructions/newsnowlabs/dockside/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03210 | $0.03210 |
| Opus 5.5 | $0.01284 | $0.01284 |
| Sonnet 5.5 | $0.00642 | $0.00642 |
| Haiku 4.5 | $0.00321 | $0.00321 |
Grade B, and why
dockside CLAUDE.md scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- `sudo s6-svc -t /etc/service/nginx` Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
`curl` — it reuses the CLI's own already-working session/TLS/connection setup. A raw `curl` How it starts
The opening of the file, as written. The whole thing — 209 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Repo Notes
./test.shruns the full static suite (Perl compile, Vue build, Vue unit tests (Vitest), ESLint, StyleLint, ShellCheck, JSON/YAML, Python compile) — run it regularly, not just for Perl../test.sh --only <check>runs a single check (e.g.--only perlwhile iterating on Perl underapp/server/liborapp/server/bin;--only vue,--only eslint, …).- When validating Perl server changes on this local Dockside host, restart:
sudo s6-svc -t /etc/service/nginxsudo s6-svc -t /etc/service/docker-event-daemon
- Before running tests that exercise server changes, restart the services above —
the running server is not auto-reloaded. Rebuild the Vue bundle
(
cd app/client && npm run build) for client changes.
The dockside CLI
Needed for two things: running the integration suite, and ad-hoc HTTP checks against a live instance mid-session (both below). Nothing else in this repo — static checks, restarting services, editing code — needs a CLI session at all.
Session setup
Check for an existing session before assuming there isn't one or that you need
credentials: run python3 cli/dockside server list (or dockside server list if it's on
PATH). Recommended usage is for the developer to already be logged in as admin locally and
hand that session to you, so one usually exists — never ask the user for credentials over
chat. If none is found, ask the user whether they'd rather log in themselves (remind them of
the login command below) or have you try it — don't just assume either way.
If asked to try it yourself: the hostname depends on your environment:
- Personal laptop/server running Dockside:
www-<name>.local.dockside.dev - Inner Dockside dev container inside an outer production Dockside: your inner
container's public hostname (e.g.
www-<name>.dockside-domain.com— the outer server's domain is whatever it actually is, no fixed convention to assume) — derive it rather than asking or guessing:ssl.domains[0]in/data/config/config.jsongives the base domain (e.g.<name>.dockside-domain.com); prependwww-to its first label for the actual UI hostname (www-<name>.dockside-domain.com). Don't trust the container's own "Navigate to ..." boot-log line for this — it can print awww.<name>...form (dot, not hyphen) that 400s; the actual working hostname is the hyphenatedwww-<name>...form above.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +7 tokens per session c39ea749e18c
- 1mo ago Changed · +43 lines · +610 tokens per session 8d73d1ad1981
- 2mo ago First seen · 166 lines · 2,593 tokens per session scan B 1a4681ce8414
dockside CLAUDE.md is an instructions file published in the GitHub repository newsnowlabs/dockside (321 stars, last pushed 5d ago), licensed Apache-2.0. It adds 3,210 tokens to every session, about $0.0128 per session on Opus 5.5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
dockside CLAUDE.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| dockside CLAUDE.mdnewsnowlabs/dockside | Instructions file | 321 | 5d ago | Apache-2.0 | B | 3,210 | Claude Code |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |