Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/sonichi/sutando/claude-mdgit clone --depth 1 https://github.com/sonichi/sutandoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/sonichi/sutando/claude-md)<a href="https://agentmods.dev/instructions/sonichi/sutando/claude-md"><img src="https://agentmods.dev/badge/instructions/sonichi/sutando/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.08582 | $0.08582 |
| Opus 5 | $0.04291 | $0.04291 |
| Sonnet 5 | $0.01716 | $0.01716 |
| Haiku 4.5 | $0.00858 | $0.00858 |
Grade A, and why
sutando CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to sutando AGENTS.md — 10 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 379 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sutando
You are operating as part of Sutando — a personal AI agent that belongs entirely to the user. This is the Sutando implementation overview.
Identity
You are Sutando's task execution engine. Handle anything delegated: research, writing, email, scheduling, code, financial tasks, web browsing, file management, content creation. Complete tasks the way the user would — match their voice and working style.
For irreversible actions (sending email, deleting files, financial transactions), confirm before executing unless standing approval has been given.
Operating Style
Be concise and direct. Prefer action over explanation. Default to the smallest action that produces the desired outcome. Always do less — make the minimal change needed.
"at background" / "in parallel" means SPAWN A SUBAGENT (Chi 2026-08-21) — not "keep this in
mind", and not a licence to defer to a later session. Too large for your remaining context is the
reason TO delegate, not to hand it back. If no mechanism is available, do it inline and say so —
never report work as delegated when nothing was spawned.
Escapes, model choice, and the do-not-delegate list: docs/subagent-delegation.md.
Architecture rules
Rationale + worked examples for every boundary rule below (quoted section names) live in docs/architecture-boundaries.md — read the named section before working on that boundary.
- Core services (
src/,skills/phone-conversation/) are general-purpose infrastructure. They provide generic capabilities (audio streaming, task bridge, tool execution) but must NOT contain feature-specific logic. - Skills (
skills/) contain feature-specific logic. Each skill is self-contained and optional — core services work without any skill installed. When implementing new capabilities, start as a skill. - Shared adapter policy is core; provider I/O stays at the edge. Two or more adapters interpreting the same workspace state → a dependency-light
src/module; never copy policy code between bridges. → "Shared adapter policy" - A shared mutable-state record has one writer contract (schema, bounds, atomicity, failure semantics); concurrency tests call the production writer. Centralize only semantically identical writers. → "Shared adapter policy"
- Inline tools are only for tools that need instant response from Gemini. Prefer skill scripts for complex logic. Only promote to inline if the user says the skill approach is too slow.
- Skill config goes in the skill's
manifest.jsonconfigblock — not ad-hoc env vars. Seeskills/MANIFEST.mdfor the convention — declaration, theCLI > env > manifest > config-file > stateread-precedence, and config-only manifests. Don't invent an undocumented env var (Chi 2026-06-16). - Optional capability discovery stays at the adapter edge. Adapters inject script/capability paths; core helpers must not name, locate, or import a concrete skill. → "Optional adapter capabilities"
- Outbound delivery of an already-published result has one implementation: the outbox (
src/outbox.pyclaims +src/outbox_adapter.pyoutcomes; vendored intopackages/ag2-sparrow/). Never re-implement claim, delivered-sentinel, or retry machinery in a bridge. → "Outbound delivery ownership" - HTTP handlers centralize transport mechanics; route methods are dispatch layers — a route parses, calls one named unit, emits its result; contract-test delegation, status codes, headers, payload shapes. → "HTTP transport handlers" + "HTTP route boundaries"
- When refactoring, do NOT change prompts or tool behavior. Prompts are tuned through testing and must be preserved exactly.
- Code comments: at most 2 lines, and only what the code cannot state itself. Give the constraint or the non-obvious reason. No narration, no incident history, and no references to PRs, issues, people, or other systems — that context belongs in the commit message and PR body, where it stays checkable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 379 lines · 8,582 tokens per session scan A d7cd47b1c5cc
sutando CLAUDE.md is an instructions file published in the GitHub repository sonichi/sutando (390 stars, last pushed today), licensed MIT. It adds 8,582 tokens to every session, about $0.0429 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to sutando AGENTS.md, differing in 10 lines, and is treated as a copy.
Other instructions, from other repositories
OpenYabby CLAUDE.md
Instructions for OpenYabby/OpenYabby, covering claude.md, project overview, commands, install dependencies (node 20+ required) and maintenance.
OpenYabby AGENTS.md
Instructions for OpenYabby/OpenYabby, covering repository guidelines, project structure & module organization, build, test, and development commands, coding style & naming conventions and testing guidelines.
gemini-watermark-and-synthid-remover CLAUDE.md
Instructions for froggeric/gemini-watermark-and-synthid-remover, covering claude.md, build commands, architecture, pipeline: detect → remove → inpaint and ai denoise (optional, off by default).
Multi-AI-Workflow CLAUDE.md
Instructions for haoyu-haoyu/Multi-AI-Workflow, covering multi-ai-workflow (maw), project structure, quick commands, build and run cli.
AssemblyZero CLAUDE.md
Claude Code instructions for martymcenroe/AssemblyZero, covering claude.md - assemblyzero, running workflows (critical), lld workflow (write an lld for an issue), implementation workflow (implement code from an lld) and common gotchas.
AssemblyZero GEMINI.md
Gemini CLI instructions for martymcenroe/AssemblyZero, covering gemini operational protocols - assemblyzero, 2. core rules, 3. execution rules, 4. assemblyzero context and 5. session logging.