Borrowing it
Nothing to install: this file belongs to Sma1lboy/coforce-apply. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Sma1lboy/coforce-apply/main/CLAUDE.mdgit clone --depth 1 https://github.com/Sma1lboy/coforce-applyWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/sma1lboy/coforce-apply/claude-md)<a href="https://agentmods.dev/instructions/sma1lboy/coforce-apply/claude-md"><img src="https://agentmods.dev/badge/instructions/sma1lboy/coforce-apply/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/sma1lboy/coforce-apply/claude-md"><img src="https://agentmods.dev/badge/instructions/sma1lboy/coforce-apply/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01484 | $0.01484 |
| Opus 5.5 | $0.00594 | $0.00594 |
| Sonnet 5.5 | $0.00297 | $0.00297 |
| Haiku 4.5 | $0.00148 | $0.00148 |
Grade A, and why
coforce-apply CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 96 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CoForce Apply
Skill-first job application agent. The canonical product is the shared skill
set under .agents/skills/; .claude/skills is a project-local compatibility
symlink to that same tree. Clone the repository and run Claude Code from the
checkout—no global skill installation is required. The repo also contains
the harness. AGENTS.md is a symlink to this file — one set of rules, two
names, no drift.
- User data home:
~/.coforce/by default — profile.json (schema canonical in theprofileskill), config.json (intent + runtime config + consents, one flat object,.agents/lib/config.mjs; it replaced the overlapping preferences.json + apply-config.json pair and migrates them on first read), instructions.md, applications.json, screened.json, accounts.json, campaigns/, applications// archives, email-sync.json (mailbox-scan state, tracker skill).experience/,out/, andresearch/(company-research cache, 30-day TTL, schema in theinterviewskill) are regenerable caches, not contract files. Resolution rule (shared via.agents/lib/data-home.mjs):$COFORCE_HOMEenv -><checkout>/.coforce/if present (private-fork mode — user's PRIVATE fork syncs data in-repo; setup verifies privacy first) ->~/.coforce. Never commit user data to the public repo. ~/.coforce/instructions.md= standing user instructions (never-apply list, preferences). EVERY skill/action touching applications reads it first and treats it as overriding metadata.- Skills own their runtime assets:
tracker/scripts/board.mjs(kanban, serve/static),start/scripts/hunt.mjs(job discovery + dedup),tailor/assets/resume_template.tex. Keep skills self-contained — no repo-relative references from skill instructions (onlyharnessis repo-dev-only and exempt). - Data files are the contract BETWEEN skills: each schema is canonical in its
owning SKILL.md (profile → profile skill, config → setup,
applications.json → tracker, screened.json → start, campaign manifest →
campaign, experience index → experience) and carries a schema version.
applications.json holds applications the user is actually chasing, and
statusis the pipeline stage only —rejectedmeans a company said no. A posting ruled out for fit never entered the pipeline and goes to screened.json (hunt.mjs screen/unscreen), so every consumer of applications.json stays correct without knowing screening exists. Skill playbooks program against schemas, never against another skill's code;.agents/lib/holds shared low-level script utilities (e.g. the atomic JSON writer), and the console server may import sibling skill libs as glue. - Two-module pipeline: Module 1 (supply) generates bullets JD-free from repo
contexts and the user reviews them INTO profile.json (
source+verifiedAtprovenance) — the profile IS the verified pool. Module 2 (demand) follows a JD and strictly SELECTS verbatim bullets from that pool (campaign.mjs pool/select, out-of-pool ids rejected); rewording always goes back through Module 1's review gate. Bullet ids are content hashes —sha256(text)[:8], computed at read time (campaign-lib.mjs) and then persisted asevidenceIdsin the campaign manifest. So a bullet's id is stable only while its text is byte-identical: never reformat, trim, re-wrap, or unicode-normalizedescription[].textin profile.json. Doing so silently detaches every already-matched job ("outside the verified pool"). - Onboarding:
setupskill; operating cycle:startskill. Submission runs through theapplyskill, the one operator, againstdocs/OPERATOR.md— the operator contract (inputs, COFORCE_STATUS events, confirmation-gate iron laws). Claude Code is the only implemented runtime; the console spawns it viatracker/scripts/agent-runner.mjs, the single adapter seam.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 96 lines · 1,484 tokens per session scan A f44b524e5378
coforce-apply CLAUDE.md is an instructions file published in the GitHub repository Sma1lboy/coforce-apply (5 stars, last pushed 1mo ago), licensed MIT. It adds 1,484 tokens to every session, about $0.0059 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
deepseek-harness AGENTS.md
AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.