Borrowing it
Nothing to install: this file belongs to skwashd/ccodolo. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/skwashd/ccodolo/main/CLAUDE.mdgit clone --depth 1 https://github.com/skwashd/ccodoloWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/skwashd/ccodolo/claude-md)<a href="https://agentmods.dev/instructions/skwashd/ccodolo/claude-md"><img src="https://agentmods.dev/badge/instructions/skwashd/ccodolo/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.02786 | $0.02786 |
| Opus 5 | $0.01393 | $0.01393 |
| Sonnet 5 | $0.00557 | $0.00557 |
| Haiku 4.5 | $0.00279 | $0.00279 |
Grade A, and why
ccodolo CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 209 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md - Guide for AI Coding Assistants
This document provides development guidelines for AI-powered coding tools working on the CCoDoLo project itself.
For project features, usage, and architecture: See README.md
Note: AGENTS.md is a symlink to this file so non-Claude assistants discover it too — edit CLAUDE.md, not the symlink.
What This Project Is
CCoDoLo is a meta-project - it provides sandboxed Docker containers for running AI coding assistants (including you). When modifying this codebase, you're improving the infrastructure that runs AI agents safely.
Repository Structure
ccodolo/
├── .github/
│ ├── dependabot.yml # Weekly updates for github-actions and gomod
│ ├── zizmor.yml # zizmor security scanner config
│ └── workflows/
│ ├── release.yml # goreleaser (triggered by v* tags)
│ ├── updates.yml # daily agent + tool version bumps (opens PRs)
│ ├── validate.yml # go vet, go test, golangci-lint, cross-platform build, docker image smoke test
│ └── zizmor.yml # GitHub Actions security scanning
├── .goreleaser.yml # Cross-platform binaries + checksums + build attestation
├── go.mod / go.sum
├── main.go # Entrypoint → cmd.Execute()
├── cmd/
│ ├── root.go # cobra root command, flags, main run() logic, TUI
│ ├── repair.go # repair-worktrees subcommand (host-side git worktree repair)
│ └── version.go # version subcommand
├── internal/
│ ├── agent/
│ │ ├── agent.go # Agent enum, metadata registry
│ │ └── agent_test.go
│ ├── config/
│ │ ├── config.go # TOML struct, Load/Save, merge, validate
│ │ ├── config_test.go
│ │ ├── migrate.go # ccodolo.config → ccodolo.toml migration
│ │ └── migrate_test.go
│ ├── docker/
│ │ ├── build.go # Image build orchestration, build-context staging
│ │ ├── build_test.go
│ │ ├── dockerfile.go # Dockerfile template rendering
│ │ ├── dockerfile_test.go
│ │ ├── hash.go # SHA-256 image tag computation
│ │ ├── hash_test.go
│ │ ├── hooks.go # Host-side startup-hook pre-flight warning
│ │ ├── hooks_test.go
│ │ └── run.go # docker run / docker exec
│ ├── fsutil/
│ │ ├── copy.go # CopyDir/CopyFile, mode-preserving
│ │ └── copy_test.go
│ ├── project/
│ │ ├── project.go # Dir creation, template copying
│ │ ├── project_test.go
│ │ ├── setup.go # Agent-specific JSON config (copilot/kiro)
│ │ └── setup_test.go
│ ├── tool/
│ │ ├── custom_tools_test.go
│ │ ├── tool.go # Tool catalog, dependency resolution
│ │ └── tool_test.go
│ └── updater/ # Automated tool-version bumper (not in released binary)
│ ├── main.go # Flags: -check, -json, -write, -only, -timeout, -allow-unverified
│ ├── version.go # Numeric-tuple version parse/compare
│ ├── plan.go # Candidate selection, bump classification
│ ├── source.go # Fetcher interface + registry dispatch
│ ├── fetch_docker.go # Docker Hub API
│ ├── fetch_github.go # GitHub Releases API
│ ├── fetch_npm.go # npm registry API
│ ├── fetch_pypi.go # PyPI JSON API
│ ├── fetch_quay.go # quay.io API
│ ├── rewrite.go # Anchored-regex file rewriters
│ ├── git.go # exec-based git helpers
│ ├── version_test.go
│ └── rewrite_test.go
├── embedded/
│ ├── embed.go # go:embed directives
│ ├── Dockerfile.tmpl # Templatized Dockerfile
│ ├── dotfiles/ # Shell configurations (.bashrc, .zshrc.local, .inputrc)
│ └── scripts/ # Container startup scripts (git worktree hygiene)
├── docs/
│ └── custom-tools.md # Custom tool catalog reference (custom-tools.json)
└── template.example/ # Example project templates
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 209 lines · 2,786 tokens per session scan A 02b14f8db3b6
ccodolo CLAUDE.md is an instructions file published in the GitHub repository skwashd/ccodolo (20 stars, last pushed today), licensed MIT. It adds 2,786 tokens to every session, about $0.0139 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.