Borrowing it
Nothing to install: this file belongs to stefanprodan/cctop. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/stefanprodan/cctop/main/AGENTS.mdgit clone --depth 1 https://github.com/stefanprodan/cctopWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/stefanprodan/cctop/agents-md)<a href="https://agentmods.dev/instructions/stefanprodan/cctop/agents-md"><img src="https://agentmods.dev/badge/instructions/stefanprodan/cctop/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/stefanprodan/cctop/agents-md"><img src="https://agentmods.dev/badge/instructions/stefanprodan/cctop/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.05075 | $0.05075 |
| Opus 5.5 | $0.02030 | $0.02030 |
| Sonnet 5.5 | $0.01015 | $0.01015 |
| Haiku 4.5 | $0.00507 | $0.00507 |
Grade C, and why
cctop AGENTS.md scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 28d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
install.sh release-binary installer served from `main` (curl … | sh): Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
install.sh release-binary installer served from `main` (curl … | sh): How it starts
The opening of the file, as written. The whole thing — 319 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Guidance for AI agents and contributors working on cctop, an interactive
top-style TUI for monitoring running Claude Code sessions.
What this is
A single Bun/TypeScript program that lists every running Claude Code session
with process stats, busy/idle state, context size, model, host app, project,
branch, last prompt, a tree of sub-processes, and live sub-agents. On a TTY it's
an interactive TUI; piped or with --once it prints one plain-text frame and
exits, while --json prints one JSON snapshot and exits.
- Runtime: Bun (TypeScript run directly, no build step for dev).
- Platforms: macOS and Linux only (process table is read via macOS
libprocFFI or Linux/proc). - Read-only, with deliberate exceptions. In its monitoring mode cctop spawns
no processes and never mutates any session, registry, or transcript. Its only
writes are its own files under
~/.claude/cctop/: the usage cache (usage.json, only under--capture-usage) and the persisted TUI preferences (settings.json, the refresh interval, sort mode, and notifications toggle, written only when the user changes them; the file also carries the hand-editedcolumnslist, which cctop only ever reads — the save merge preserves it); the only thing it ever does to another process is send a signal, and only on an explicit user action (x→ SIGTERM a session;f→ SIGTERM a session's orphaned dev-server processes to free their ports). Preserve this property. Separate from all of that is one explicit, opt-in mode: thecctop upgradesubcommand (src/upgrade.ts) reaches the network and replaces cctop's own binary. It never runs from the refresh loop — the monitor path never even imports it — so everything that isn'tcctop upgradestays read-only. It is also the only thing that touches the network at all: the monitor makes no network calls, a propertydocs/usage-limits.mdalready relies on ("cctop is read-only: it reads~/.claudeand the process table, and makes no network calls") and the reason usage limits arrive through a status-line hook instead of an API call. The TUI's "restart to run the new version" notice preserves that: it stats its own binary (src/binary.ts) to see the file was swapped underneath it, rather than asking GitHub whether a release exists. Polling from the refresh loop would break it. - Zero runtime dependencies. cctop imports only Bun and OS built-ins
(
bun:ffi,node:fs, …);package.jsonhas nodependenciesfield (the devDependencies are just Biome/tsc/types). Do not add npm packages — keep it dependency-free.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 28d ago Changed · +1 lines · +31 tokens per session bc945cddd469
- 1mo ago Changed · +1 lines · +24 tokens per session 2e1952697838
- 1mo ago First seen · 317 lines · 5,020 tokens per session scan C 1960da57d14c
cctop AGENTS.md is an instructions file published in the GitHub repository stefanprodan/cctop (147 stars, last pushed 26d ago), licensed Apache-2.0. It adds 5,075 tokens to every session, about $0.0203 per session on Opus 5.5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
vscode model-prompts.instructions.md
Model-specific prompt authoring and registry guidelines.