Borrowing it
Nothing to install: this file belongs to ngreenwall/claude-skills. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/ngreenwall/claude-skills/main/CLAUDE.mdgit clone --depth 1 https://github.com/ngreenwall/claude-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/ngreenwall/claude-skills/claude-md)<a href="https://agentmods.dev/instructions/ngreenwall/claude-skills/claude-md"><img src="https://agentmods.dev/badge/instructions/ngreenwall/claude-skills/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01643 | $0.01643 |
| Opus 5 | $0.00822 | $0.00822 |
| Sonnet 5 | $0.00329 | $0.00329 |
| Haiku 4.5 | $0.00164 | $0.00164 |
Grade A, and why
claude-skills CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 20 lines — stays where its author put it; the contents beside it link to each section on GitHub.
claude-skills
Public, machine-agnostic rewrites of six Claude Code skills (project-init, handoff, drift-check, qa-audit, token-audit, model-alignment-audit), stripped of any personal or machine-specific setup so anyone can install them.
Check docs/WORKLOG.md for the current task list and recent session notes before starting work.
What this is
A public repo of installable Claude Code skills. Each skill is a folder with a SKILL.md, no build step, no dependency on any private repo. Rewritten from private originals in ~/my-ai-agent to strip personal/machine-specific setup (names, canary tokens, Cursor linkage scripts, ~/my-ai-agent paths, rulesync-specific mechanics).
Key decisions
- [2026-08-30] Ran an interactive README accuracy pass against each skill's actual SKILL.md behavior: confirmed all six skill blurbs matched real behavior, fixed one real bug (
project-init/assets/context-router-indepth.md's step comment said "Step 5b," should be "Step 6"), and fixedqa-audit/token-audit's README target lists, which omitted slash command files despite both skills covering them. Also restructured README's Skills section into "Project workflow" (project-init,handoff,drift-check) vs. "Audit skills" (qa-audit,token-audit,model-alignment-audit) with a comparison table, and rewrote all six taglines from mechanism-first to outcome-first, the originals described what a skill creates, not why it matters. - [2026-08-17] Audited this repo against a same-session pass over the private
~/my-ai-agentskills library (guidance/model-fit issues, not token bloat). Two real bugs matched and were fixed here: (1)qa-audit/token-auditStep 1's code-file guard was inverted, "code if extension isn't.md" wrongly rejected.json/.yaml/other config files as code; fixed to an explicit code-extension check, then recognized-.md-location check, then ask-to-confirm for everything else. (2)handoffStep 6 stated the decision-log cap as 15 entries, contradictingreferences/decision-log-maintenance.md's actual 8 (which matches this file's own archive behavior); fixed to 8. Other items on the private-repo list didn't apply here: no relative bundled-script paths inproject-init, no CLAUDE.md/drift-check auto-trigger contradiction, no 3+ tier risk rubric, no missing negative triggers, and the mechanical-steps-run-without-pausing note was already present inhandoffStep 9. Also ported the private repo's newmodel-alignment-auditskill (Anthropic-guidance-and-model-fit audit, distinct fromtoken-audit's bloat focus) as this repo's sixth skill, stripped the same way as the others: notargets:field, sync-tool language generalized, machine-specific Vertex-access section dropped in favor of a generic WebFetch/WebSearch-unavailable guard. - [2026-07-22] Reverted part of the 2026-07-20 token-audit trim to handoff after live use showed WORKLOG.md/decision-log entries were still bloating: archive thresholds dropped back from 10/15 to 6/8, and the softened length guardrails became hard-enforced counts again, matching the same reversal already made in the private ~/my-ai-agent repo. Also ported that repo's new token-audit Mode C (refresh guidance against current Anthropic docs) and a bare-invocation menu step, and added a folder-structure diagram plus Cursor-availability tags to README.
- [2026-07-20] Ported the private repo's token-audit pass (commit c05d345) into
handoff,drift-check,qa-audit, andproject-initwhere it genuinely applied. Rejected two of its changes: its worklog-archive ordering (oldest-at-top) contradicts this repo's actual archive layout (newest-at-top, verified againstdocs/archive/worklog-2026-07.md), and its simplifieddrift-checkCheck 3 compaction logic loses the Check-1-vs-Check-2 distinction our version correctly makes. Also fixed a pre-existing bug found in the process:handoffStep 6 said decisions append oldest-first, contradictingCLAUDE.md's real newest-at-top log. - [2026-07-20] Ported Claude Code slash-command file support (
.claude/commands/*.md) intoqa-auditandtoken-auditfrom the private repo: qa-audit gained a command-specific frontmatter checklist branch, token-audit added command files to recognized locations and the unused-item scan. Excluded the private diff's.rulesync/commands/*handling, rulesync-specific and not applicable here. - [2026-07-09] Pulled a token-optimization pass from the private repo into
handoffandproject-init: inline templates (worklog starter, CLAUDE.md starters, Cursor context-router content) moved out ofSKILL.mdinto companionassets/*.mdfiles, loaded on demand instead of always-loaded. Kept this repo's own deliberate addition, the override-marking sentence in both context-router asset files ("the project rule wins only when it explicitly states it's overriding..."), even though the private version had dropped it, since it's a documented decision specific to this repo, not something to lose in the sync. Also ported a new guardrail intotoken-audit: a token cut that makes a file harder for a human to scan counts as a quality cost, flag it "uncertain," not "safe," same as a nuance-loss risk.drift-check's only private change was prose tightening (no asset split); merged its duplicated "clean" and "drifting" output-format examples into one block with inline conditional comments. - [2026-07-09] Added
token-auditas the fifth public skill, rewritten from the private original at~/my-ai-agent/.rulesync/skills/token-audit/SKILL.md. Stripped the same way asqa-audit: notargets:frontmatter field, rulesync-managed-file resolution generalized to "if a sync tool is in use," therulesync generate --targets ...regenerate step generalized the same way, andglobal-context.mdnaming generalized to "your global context file." The unused-skills question in Step 5 asks "the user" generically instead of by name. Scoped Claude Code only, same reasoning asqa-audit: the per-file Opus-subagent mechanic has no Cursor or Cowork equivalent. - [2026-07-09] Pulled three protocol updates from the private
qa-auditinto the public version: Step 2's context-gathering narrowed from "read README/decision logs/sibling skills" to a targeted check-your-decision-log-for-matching-entries-only approach (cuts unnecessary full-file reads before spawning agents); the QA prompt template now caps each finding at 2-3 sentences with no restated reasoning; Step 4 adds a compact-report instruction and suggests compacting the conversation after a full-library run since the raw agent transcripts aren't needed once findings are compiled. All three are efficiency changes validated in the private repo first, no behavior change to what qa-audit catches. - [2026-07-09]
qa-audithardcodesmodel: "opus"for its per-file subagent calls inSKILL.md. No config flag for this, changing the model means editing that line directly.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 20 lines · 1,643 tokens per session scan A ad78e82990c1
claude-skills CLAUDE.md is an instructions file published in the GitHub repository ngreenwall/claude-skills (2 stars, last pushed 8d ago), licensed MIT. It adds 1,643 tokens to every session, about $0.0082 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.