What is zotkit CLAUDE.md?

Repository-specific instructions for developing the Zotkit Python package, a command-line and library tool for working with a Zotero research library through its web API and WebDAV.

Use it when fixing bugs, changing or releasing Zotkit, running its tests, updating documentation, or deciding whether a change needs approval from the main project session.

It gives an AI coding agent the project’s rules for scope, cross-session communication, versioning, documentation, and safe changes.

How oldantique/zotkit configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to oldantique/zotkit. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/oldantique/zotkit/main/CLAUDE.md

Clone the repo

git clone --depth 1 https://github.com/oldantique/zotkit

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/oldantique/zotkit/claude-md/github.svg)](https://agentmods.dev/instructions/oldantique/zotkit/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/oldantique/zotkit/claude-md"><img src="https://agentmods.dev/badge/instructions/oldantique/zotkit/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/oldantique/zotkit/claude-md"><img src="https://agentmods.dev/badge/instructions/oldantique/zotkit/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 2,310 This file is loaded in full into every session.

When invoked 2,310 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.02310	$0.02310
Opus 5.5	$0.00924	$0.00924
Sonnet 5.5	$0.00462	$0.00462
Haiku 4.5	$0.00231	$0.00231

Measured 9d ago against content hash 68e60aa0b7f1, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

zotkit CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 142 lines

How it starts

The opening of the file, as written. The whole thing — 142 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Development context (for agent sessions in this repo)

This file is for AI-assisted development sessions on zotkit itself. If you are an agent helping a user use zotkit on their library, read AGENTS.md instead.

Scope

This repo is the Python package only (headless Zotero Web-API + WebDAV CLI/library). The Zotero Reader plugin that once lived here moved out (ADR-0003) and is no longer maintained or linked (ADR-0006) — out of scope for this repo. Data conventions (version of record, abstract-source stamp) are documented in README — keep docs and code consistent with it.

Cross-session routing

Crash/bug reports arriving directly from any session may be fixed and shipped right away when the fix is behavior-preserving and tested — but notify the HQ session (private zotero repo) in the same breath. Feature requests, CLI surface changes, and anything touching conventions/policy need an HQ work order first. Never name other sessions' confidential projects in public surfaces (commit messages, release notes, issues) — "a downstream session" is enough.

Releasing

Bump the version in both pyproject.toml and zotkit/__init__.py (keep them equal).
Update README "Limits & roadmap" / changelog notes if behavior changed.
Commit, push to main.
Create the GitHub release via REST — gh release create has given a spurious scope error here, the API works: gh api repos/oldantique/zotkit/releases -X POST -f tag_name=vX.Y.Z -f name=vX.Y.Z -F [email protected] (draft the body in a file and leak-check it first; a release body is public)
.github/workflows/publish.yml then publishes to PyPI automatically via Trusted Publishing (no tokens anywhere). Tags are plain vX.Y.Z.
Verify: pipx run --spec zotkit==X.Y.Z --no-cache --pip-args="--no-cache-dir" zotkit --version once the publish run succeeds. Without --no-cache-dir, pip can reuse a stale index and say "no matching distribution" for a version PyPI already serves. If the publish fails (v0.9.0: Windows-only test), don't move the tag. Fix, release the next patch version, and mark the failed release's body as not on PyPI.
Close the GitHub issues the release shipped, with a comment naming the version.

Read the full file on GitHub · 142 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

9d ago Changed · +23 lines · +438 tokens per session 68e60aa0b7f1
26d ago Changed · +6 lines · +130 tokens per session 6295c03ac4e2
27d ago Changed · +1 lines · +22 tokens per session 92c2bdf81a8f
1mo ago Changed · +8 lines · +139 tokens per session 256aefbd324f
2mo ago First seen · 104 lines · 1,581 tokens per session scan A 15bb38f36f8d

Subscribe to this mod's changes

zotkit CLAUDE.md is an instructions file published in the GitHub repository oldantique/zotkit (27 stars, last pushed 10d ago), licensed MIT. It adds 2,310 tokens to every session, about $0.0092 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Research Zotero bibliography cli headless reference-manager webdav

zotkit CLAUDE.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
zotkit CLAUDE.mdoldantique/zotkit	Instructions file	27	10d ago	MIT	A	2,310	Claude Code
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

zotkit: Instructions file for Claude Code