Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/recflare/patch/claude-mdgit clone --depth 1 https://github.com/recflare/patchWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.05583 | $0.05583 |
| Opus 5 | $0.02792 | $0.02792 |
| Sonnet 5 | $0.01117 | $0.01117 |
| Haiku 4.5 | $0.00558 | $0.00558 |
Grade A, and why
patch CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 310 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md
Guidance for working in this repo. This is a BepInEx 6 (IL2CPP) Harmony plugin that points the Rec Room client at a self-hosted server. Read the README for the user-facing overview; this file is the stuff you only learn by getting burned.
Build & deploy
dotnet build -c Debug -p:GamePath="C:\Games\depots\471711\23191908"
GamePathpoints at the Rec Room install root. It's normally set in the gitignoredGamePath.props(seeGamePath.props.example); the-p:GamePath=...override is handy for one-offs.- The project references ~300 interop DLLs from
$(GamePath)\BepInEx\interop. Those are generated by Il2CppInterop the first time the game runs under BepInEx — if they're missing, launch the game once. - A post-build
DeployPlugintarget copiesRecNetPlugin.dllinto$(GamePath)\BepInEx\plugins\. The copy fails while Rec Room is running (the DLL is locked) — that's an MSB3027 error, not a compile error. Close the game and rebuild. The DLL is also always left inbin/Debug/net6.0/.
Hard-won gotchas (read before patching anything)
-
Interop assemblies are stubs. The real code is native. The DLLs under
BepInEx/interopare Il2CppInterop proxies — method bodies just marshal intoGameAssembly.dll. dnSpy / managed decompilation of the interop shows no real logic. You cannot read the actual algorithms statically; you learn behavior by patching + logging at runtime. -
Obfuscated names differ per game build. Rec Room's type/method names are obfuscated (
PGECJHKNIEN,MDBMGOBECDJ,cm_did_ppk, etc.). A dnSpy dump from some build will not necessarily match the interop you compile against. Real example from the DUID work: a dnSpy dump called the methodCheckForMismatchand the pref fieldDBAIOPIEJNC, but in our interop the method isCheckForDUIDMismatchand neitherDBAIOPIEJNCnorMDBMGOBECDJexist at all. Always resolve members against the interop DLLs you actually build against (see the Cecil snippet below), never against a dump from an unknown build.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 310 lines · 5,583 tokens per session scan A 7ec187965919
patch CLAUDE.md is an instructions file published in the GitHub repository recflare/patch (6 stars, last pushed 12d ago), licensed MIT. It adds 5,583 tokens to every session, about $0.0279 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
postman-claude-code-plugin CLAUDE.md
Instructions for Postman-Devrel/postman-claude-code-plugin, covering claude.md, what this is, repository structure, how the plugin works and component conventions.
no-vibe AGENTS.md
Instructions for rizukirr/no-vibe, covering agents, repo purpose, architecture (high-signal files), verification commands and conventions that are easy to miss.
pamplejuce AGENTS.md
Instructions for sudara/pamplejuce, a project described as: A JUCE audio plugin template. JUCE 8, Catch2, Pluginval, macOS notarization, Azure Trusted Signing, Github Actions.
openclaw-mcp-bridge CLAUDE.md
Instructions for gabrielekarra/openclaw-mcp-bridge, covering claude.md, project overview, build & development commands, architecture and key dependencies.
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).