Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/rootsli/claude-quickstart-cn/claude-mdgit clone --depth 1 https://github.com/rootsli/claude-quickstart-cnWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/rootsli/claude-quickstart-cn/claude-md)<a href="https://agentmods.dev/instructions/rootsli/claude-quickstart-cn/claude-md"><img src="https://agentmods.dev/badge/instructions/rootsli/claude-quickstart-cn/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00860 | $0.00860 |
| Opus 5 | $0.00430 | $0.00430 |
| Sonnet 5 | $0.00172 | $0.00172 |
| Haiku 4.5 | $0.00086 | $0.00086 |
Grade A, and why
claude-quickstart-cn CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
项目配置
必需规则
1. 响应语言
所有回复内容与代码注释均使用简体中文编写。
2. 技术栈
- 框架: [请修改为你的框架，如 Next.js / Vue / Django]
- 语言: [请修改为你的语言，如 TypeScript / Python / Go]
- 样式: [如 Tailwind CSS / SCSS]
- 状态管理: [如 Zustand / Pinia / Redux]
3. 代码质量
- 禁止在多个文件重复定义相同值（单一数据源 SSOT）
- 一个文件只承担单一职责（单一职责原则 SRP）
- 单个文件代码超过 300 行时必须拆分
- 禁止使用 any 类型
4. 可做 / 不可做
（最高优先级）
O 先阅读文件再修改 X 未经确认直接修改
O 修改后进行验证 X 省略验证步骤
O 遵循现有编码规范 X 随意引入新编码规范
O 仅修改需求指定部分 X 重构无关代码
O 修改后核查关联文件 X 只查看已修改文件
O 出错尝试2-3次后更换方案 X 无限制重复同一方式
5. 安全规范
- 无明确要求时，不得执行 Git 提交 / 推送操作
- 禁止直接向主分支推送代码，禁止强制推送（--force）
- 禁止在代码中硬编码敏感信息（API 密钥、密码、令牌），统一使用环境变量
- 必须将
.env文件加入.gitignore忽略列表 - 用户输入必须在服务端校验，仅客户端校验不满足安全要求
- SQL 查询仅使用参数绑定，禁止字符串拼接拼接语句
- 输出 HTML 内容时，必须做转义处理以防范 XSS 攻击
- 错误信息中禁止暴露内部信息（数据库结构、服务器路径、堆栈跟踪）
- 出现错误尝试 2-3 次仍失败后，需提供其他解决方案
6. 架构规范
- UI 与逻辑分离: 组件仅负责页面渲染，自定义 Hooks 只负责状态管理与业务逻辑
- DRY 复用原则: 相同逻辑重复出现 2 次及以上时，抽离为公共模块
- 落实单一数据源: 配置项、常量、类型定义统一由单一源头管理并全局引用
- 依赖方向: 上层模块引用下层模块，禁止反向依赖引用
7. 修改后自查
- 修改文件后，检查是否会影响其他关联文件
- 若相同配置值分散在多个文件，需统一同步修改
- 严格按「修改 → 校验 → 再修改」流程执行，禁止无校验连续修改
8. 事前风险排查
任务完成前提前排查各类失败场景：
- 边界场景检查：空值 / 未定义、空数组、网络超时、并发请求
- 确认测试覆盖率是否仅覆盖正常业务流程
- 排查发现的问题，需在任务收尾完成前全部修复
参考文档
- 编码风格规范:
.claude/rules/coding-style.md - 项目运营规则:
.claude/rules/project-rules.md - 日期计算规则:
.claude/rules/date-rules.md - 执行完整性规则:
.claude/rules/execution-rules.md - 安全细则规范:
.claude/rules/security-rules.md - 产品需求文档编写指南:
.claude/rules/prd-guide.md
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 68 lines · 860 tokens per session scan A 40aa9624fb45
claude-quickstart-cn CLAUDE.md is an instructions file published in the GitHub repository rootsli/claude-quickstart-cn (10 stars, last pushed 1mo ago), licensed CC0-1.0. It adds 860 tokens to every session, about $0.0043 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).