Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/sebaboler/vanguard/claude-mdgit clone --depth 1 https://github.com/SebaBoler/vanguardWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/sebaboler/vanguard/claude-md)<a href="https://agentmods.dev/instructions/sebaboler/vanguard/claude-md"><img src="https://agentmods.dev/badge/instructions/sebaboler/vanguard/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00200 | $0.00200 |
| Opus 5 | $0.00100 | $0.00100 |
| Sonnet 5 | $0.00040 | $0.00040 |
| Haiku 4.5 | $0.00020 | $0.00020 |
Grade A, and why
vanguard CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
CLAUDE.md
Vanguard is a standalone TypeScript framework — an autonomous software factory. Strict TypeScript, ES modules with explicit .js import extensions, Node 24+. Tests are co-located as *.test.ts (Vitest).
Hard constraints
- Never modify files under
.github/workflows/. The CIGITHUB_TOKENcannot push changes to workflow files — GitHub rejects the push without aworkflow-scoped token, which fails the run and loses all the work. If a task seems to need a workflow change, make the code/doc change instead and describe the needed workflow edit in the PR body for a human to apply by hand. - Run
pnpm typecheckandpnpm testbefore signalling completion.
Style
- Match the surrounding code: comment density, naming, idiom. Keep diffs minimal.
- Explicit return types; prefer
const; early returns; functional where it fits.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 14 lines · 200 tokens per session scan A 8b7535dd0ed5
vanguard CLAUDE.md is an instructions file published in the GitHub repository SebaBoler/vanguard (4 stars, last pushed 2d ago), licensed MIT. It adds 200 tokens to every session, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
agent-inspect AGENTS.md
AGENTS.md instructions for rajudandigam/agent-inspect, covering agentinspect ai maintainer instructions, product boundary, source of truth, public-copy rule and start every task.
spine CLAUDE.md
Claude Code instructions for synaptixs/spine, covering spine — working on this repo, layout — where things live, invariants — break these and things get subtly wrong, gotchas that have bitten and before pushing.
shua-labs AGENTS.md
AGENTS.md instructions for jmenzies722/shua-labs, covering agents, what shua labs is, brand constraints, architecture and testing requirements.
gitpin AGENTS.md
AGENTS.md instructions for shmindmaster/gitpin, covering agents.md - gitpin, mission, knowledge authority, start here and architecture.
sandy AGENTS.md
Instructions for jamestelfer/sandy, a project described as: Sandboxed TypeScript runtime for AI coding agents to query AWS — full SDK access with in-sandbox aggregation, credentials flow via IMDS and never enter the VM. Ships as a Claude Code plugin (MCP) and a standalone CLI, backed by Shuru microVMs or Docker.
mcp-supersubagents typescript.instructions.md
Instructions for yigitkonur/mcp-supersubagents, covering typescript review guidelines, type safety, module system, patterns and enums and constants.