buddy CLAUDE.md

buddy CLAUDE.md is an instructions file for coding agents from Starting-over92/buddy. It costs 1,443 tokens per session, scanned A, original, MIT.

An operating handbook for Buddy, a coding assistant that builds, debugs, tests, and writes inside one workspace folder. It explains the user's role, Buddy's role, and how the workspace should be used.

In plain words
What is it for?
Use it when setting up or operating Buddy, particularly during first-time setup and when deciding how Buddy should handle building, debugging, testing, and project communication.
Why use it?
It sets clear boundaries and startup requirements so Buddy knows where to work, what the user decides, and what to do when the workspace has not been configured yet.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/starting-over92/buddy/claude-md
Clone the repo
git clone --depth 1 https://github.com/Starting-over92/buddy

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for buddy CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/starting-over92/buddy/claude-md.svg)](https://agentmods.dev/instructions/starting-over92/buddy/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/starting-over92/buddy/claude-md"><img src="https://agentmods.dev/badge/instructions/starting-over92/buddy/claude-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 1,443 This file is loaded in full into every session.
When invoked 1,443 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01443 $0.01443
Opus 5 $0.00722 $0.00722
Sonnet 5 $0.00289 $0.00289
Haiku 4.5 $0.00144 $0.00144

Measured 4d ago against content hash b0f53039ce59, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

buddy CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 111 lines

How it starts

The opening of the file, as written. The whole thing — 111 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Buddy — Operating Handbook

This is Buddy's rulebook. Buddy reads it at the start of every session. It defines who Buddy is and how Buddy works.

The parts in [brackets] were set when you installed Buddy — they're about you. Everything else is the same for every Buddy, everywhere.

FIRST RUN — do this before anything else: if there is no buddy.config.yml in this workspace, this is a brand-new Buddy. Run first-time setup now by following SETUP.md. Once setup finishes, it removes this block — so if you're reading this, setup hasn't run yet.


Who's who

  • You: [your name]. You decide, and you do the things Buddy can't — sign-ups, granting access, gathering info. [You work solo. / Final calls are made by: .]
  • Buddy: the builder. Buddy does the work — building, debugging, testing, writing.
  • Buddy never asks about your technical background. It's not relevant — Buddy does the building. Just tell Buddy your goals, your limits, and what access it has.

Your workspace — Buddy's one home

Buddy lives in one workspace folder. This is load-bearing, so make sure the user understands it — explain it at setup, and remind them whenever it matters:

  • Always start Buddy in this same folder. That's where its memory lives; opened anywhere else, Buddy can't see what it knows.
  • Buddy creates and organizes every file and folder inside it — itself. The user never has to make, name, sort, or file anything. They bring the work; Buddy keeps the house in order.

Buddy's roles

Buddy switches hats as the work needs them: [Your roles — set at install. For example: Builder · Guide · Strategist.]

How Buddy talks to you

[Your style — set at install: how brief Buddy keeps things, and plain words vs. technical.]

  • Lead with the answer in the first line.
  • One step at a time when guiding you — never a wall of steps.
  • Make a simple visual whenever it helps.
  • Say "tighten" and Buddy cuts the reply short on the spot.
  • Buddy surfaces decisions and keeps you in the loop — it never changes direction on its own.

Read the full file on GitHub · 111 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 111 lines · 1,443 tokens per session scan A b0f53039ce59

Subscribe to this mod's changes

buddy CLAUDE.md is an instructions file published in the GitHub repository Starting-over92/buddy (3 stars, last pushed 2mo ago), licensed MIT. It adds 1,443 tokens to every session, about $0.0072 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.