claude-skills: Instructions file for Claude Code

CLAUDE.md

claude-skills CLAUDE.md is an instructions file for Claude Code from ngreenwall/claude-skills. It costs 1,643 tokens per session, scanned A, original, MIT.

Project instructions for a public collection of six installable Claude Code skills, each stored in a SKILL.md file. The skills cover starting projects, handing work off, checking drift, auditing quality, auditing tokens, and checking model alignment.

In plain words
What is it for?
Use them when working on the claude-skills repository, especially before starting a task or changing the skills and their documentation.
Why use it?
They document how the skills work and keep contributors aligned with the repository’s current decisions and task notes.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md. Also seen: reads .claude/ paths; mentions CLAUDE.md; mentions subagents.

This is ngreenwall/claude-skills's own configuration. It tells Claude Code how to work on claude-skills itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything claude-skills configures →

Reuse

Borrowing it

Nothing to install: this file belongs to ngreenwall/claude-skills. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/ngreenwall/claude-skills/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/ngreenwall/claude-skills

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for claude-skills CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/ngreenwall/claude-skills/claude-md.svg)](https://agentmods.dev/instructions/ngreenwall/claude-skills/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/ngreenwall/claude-skills/claude-md"><img src="https://agentmods.dev/badge/instructions/ngreenwall/claude-skills/claude-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 1,643 This file is loaded in full into every session.
When invoked 1,643 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01643 $0.01643
Opus 5 $0.00822 $0.00822
Sonnet 5 $0.00329 $0.00329
Haiku 4.5 $0.00164 $0.00164

Measured 7d ago against content hash ad78e82990c1, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

claude-skills CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 20 lines

How it starts

The opening of the file, as written. The whole thing — 20 lines — stays where its author put it; the contents beside it link to each section on GitHub.

claude-skills

Public, machine-agnostic rewrites of six Claude Code skills (project-init, handoff, drift-check, qa-audit, token-audit, model-alignment-audit), stripped of any personal or machine-specific setup so anyone can install them.

Check docs/WORKLOG.md for the current task list and recent session notes before starting work.

What this is

A public repo of installable Claude Code skills. Each skill is a folder with a SKILL.md, no build step, no dependency on any private repo. Rewritten from private originals in ~/my-ai-agent to strip personal/machine-specific setup (names, canary tokens, Cursor linkage scripts, ~/my-ai-agent paths, rulesync-specific mechanics).

Key decisions

  • [2026-08-30] Ran an interactive README accuracy pass against each skill's actual SKILL.md behavior: confirmed all six skill blurbs matched real behavior, fixed one real bug (project-init/assets/context-router-indepth.md's step comment said "Step 5b," should be "Step 6"), and fixed qa-audit/token-audit's README target lists, which omitted slash command files despite both skills covering them. Also restructured README's Skills section into "Project workflow" (project-init, handoff, drift-check) vs. "Audit skills" (qa-audit, token-audit, model-alignment-audit) with a comparison table, and rewrote all six taglines from mechanism-first to outcome-first, the originals described what a skill creates, not why it matters.
  • [2026-08-17] Audited this repo against a same-session pass over the private ~/my-ai-agent skills library (guidance/model-fit issues, not token bloat). Two real bugs matched and were fixed here: (1) qa-audit/token-audit Step 1's code-file guard was inverted, "code if extension isn't .md" wrongly rejected .json/.yaml/other config files as code; fixed to an explicit code-extension check, then recognized-.md-location check, then ask-to-confirm for everything else. (2) handoff Step 6 stated the decision-log cap as 15 entries, contradicting references/decision-log-maintenance.md's actual 8 (which matches this file's own archive behavior); fixed to 8. Other items on the private-repo list didn't apply here: no relative bundled-script paths in project-init, no CLAUDE.md/drift-check auto-trigger contradiction, no 3+ tier risk rubric, no missing negative triggers, and the mechanical-steps-run-without-pausing note was already present in handoff Step 9. Also ported the private repo's new model-alignment-audit skill (Anthropic-guidance-and-model-fit audit, distinct from token-audit's bloat focus) as this repo's sixth skill, stripped the same way as the others: no targets: field, sync-tool language generalized, machine-specific Vertex-access section dropped in favor of a generic WebFetch/WebSearch-unavailable guard.
  • [2026-07-22] Reverted part of the 2026-07-20 token-audit trim to handoff after live use showed WORKLOG.md/decision-log entries were still bloating: archive thresholds dropped back from 10/15 to 6/8, and the softened length guardrails became hard-enforced counts again, matching the same reversal already made in the private ~/my-ai-agent repo. Also ported that repo's new token-audit Mode C (refresh guidance against current Anthropic docs) and a bare-invocation menu step, and added a folder-structure diagram plus Cursor-availability tags to README.
  • [2026-07-20] Ported the private repo's token-audit pass (commit c05d345) into handoff, drift-check, qa-audit, and project-init where it genuinely applied. Rejected two of its changes: its worklog-archive ordering (oldest-at-top) contradicts this repo's actual archive layout (newest-at-top, verified against docs/archive/worklog-2026-07.md), and its simplified drift-check Check 3 compaction logic loses the Check-1-vs-Check-2 distinction our version correctly makes. Also fixed a pre-existing bug found in the process: handoff Step 6 said decisions append oldest-first, contradicting CLAUDE.md's real newest-at-top log.
  • [2026-07-20] Ported Claude Code slash-command file support (.claude/commands/*.md) into qa-audit and token-audit from the private repo: qa-audit gained a command-specific frontmatter checklist branch, token-audit added command files to recognized locations and the unused-item scan. Excluded the private diff's .rulesync/commands/* handling, rulesync-specific and not applicable here.
  • [2026-07-09] Pulled a token-optimization pass from the private repo into handoff and project-init: inline templates (worklog starter, CLAUDE.md starters, Cursor context-router content) moved out of SKILL.md into companion assets/*.md files, loaded on demand instead of always-loaded. Kept this repo's own deliberate addition, the override-marking sentence in both context-router asset files ("the project rule wins only when it explicitly states it's overriding..."), even though the private version had dropped it, since it's a documented decision specific to this repo, not something to lose in the sync. Also ported a new guardrail into token-audit: a token cut that makes a file harder for a human to scan counts as a quality cost, flag it "uncertain," not "safe," same as a nuance-loss risk. drift-check's only private change was prose tightening (no asset split); merged its duplicated "clean" and "drifting" output-format examples into one block with inline conditional comments.
  • [2026-07-09] Added token-audit as the fifth public skill, rewritten from the private original at ~/my-ai-agent/.rulesync/skills/token-audit/SKILL.md. Stripped the same way as qa-audit: no targets: frontmatter field, rulesync-managed-file resolution generalized to "if a sync tool is in use," the rulesync generate --targets ... regenerate step generalized the same way, and global-context.md naming generalized to "your global context file." The unused-skills question in Step 5 asks "the user" generically instead of by name. Scoped Claude Code only, same reasoning as qa-audit: the per-file Opus-subagent mechanic has no Cursor or Cowork equivalent.
  • [2026-07-09] Pulled three protocol updates from the private qa-audit into the public version: Step 2's context-gathering narrowed from "read README/decision logs/sibling skills" to a targeted check-your-decision-log-for-matching-entries-only approach (cuts unnecessary full-file reads before spawning agents); the QA prompt template now caps each finding at 2-3 sentences with no restated reasoning; Step 4 adds a compact-report instruction and suggests compacting the conversation after a full-library run since the raw agent transcripts aren't needed once findings are compiled. All three are efficiency changes validated in the private repo first, no behavior change to what qa-audit catches.
  • [2026-07-09] qa-audit hardcodes model: "opus" for its per-file subagent calls in SKILL.md. No config flag for this, changing the model means editing that line directly.

Read the full file on GitHub · 20 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago First seen · 20 lines · 1,643 tokens per session scan A ad78e82990c1

Subscribe to this mod's changes

claude-skills CLAUDE.md is an instructions file published in the GitHub repository ngreenwall/claude-skills (2 stars, last pushed 8d ago), licensed MIT. It adds 1,643 tokens to every session, about $0.0082 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex · 5,153 tokens

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,296 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,469 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).

microsoft/vscode · 5,001 tokens

spec-kit AGENTS.md

AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.

github/spec-kit · 7,104 tokens