agentmods.dev

strale: Instructions file for Claude Code

CLAUDE.md

strale CLAUDE.md is an instructions file for Claude Code from strale-io/strale. It costs 22,670 tokens per session, scanned D, original, MIT.

A set of workflow instructions for the Strale project, including session modes, required Notion access, workspace structure, and governance rules. Notion is a shared workspace for documents, plans, and databases.

In plain words
What is it for?
Use it when starting Strale work, choosing between quick and full workflows, consulting project plans, recording decisions, or following Notion-based governance.
Why use it?
It keeps project work aligned with the team’s required process, records, and decision-making rules.

Instructions file for Claude Code

Written for Claude Code: SessionStart hook event. Also seen: reads .claude/ paths; mentions CLAUDE.md; mentions Claude Code.

This is strale-io/strale's own configuration. It tells Claude Code how to work on strale itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything strale configures →

not rated 5repo changed today D scan 22,670 tokens original MIT
View source ↗ strale-io/strale strale.dev
Reuse

Borrowing it

Nothing to install: this file belongs to strale-io/strale. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/strale-io/strale/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/strale-io/strale

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for strale CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/strale-io/strale/claude-md/github.svg)](https://agentmods.dev/instructions/strale-io/strale/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/strale-io/strale/claude-md"><img src="https://agentmods.dev/badge/instructions/strale-io/strale/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for strale CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/strale-io/strale/claude-md"><img src="https://agentmods.dev/badge/instructions/strale-io/strale/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 22,670 This file is loaded in full into every session.
When invoked 22,670 The same file — it is already loaded in full.
Security scan D 3 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.22670 $0.22670
Opus 5.5 $0.09068 $0.09068
Sonnet 5.5 $0.04534 $0.04534
Haiku 4.5 $0.02267 $0.02267

Measured today against content hash c0cd3b6a7adf, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade D, and why

strale CLAUDE.md scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

`~/.codex/config.toml` by its trunk path, which must exist on `main`)

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

**Second failure mode:** creating a Windows directory junction from a temporary worktree to the main checkout's `node_modules`, then later removing that worktree with `rm -rf`, follows the junction and **deletes the real

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

For wire-shape ↔ consumer-shape contracts (where backend uses one set of names and the frontend normalizer maps to different names — e.g. backend `fallback_capability` → frontend `capability_slug`), the shape-check scrip
CLAUDE.md · 845 lines

How it starts

The opening of the file, as written. The whole thing — 845 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Workflow Protocol

Times for Petter: give every time in Swedish local time (Europe/Stockholm: CET, CEST in summer), never UTC. UTC stays only in machine artifacts (logs, receipts, cron, commit metadata). Petter, 2026-10-15.

Session Start

  1. Declare session intent (one sentence: what is this session for?)
  2. Determine mode:
    • Quick: Bug fix, config change, single small component (<2 hours, no design decisions)
    • Full: New feature, design exploration, multi-component work, anything requiring decisions
  3. Escalation triggers: second feature touched, design decision emerges, >2hr estimate, contradiction detected. See .claude/PROTOCOL.md for full criteria and protocol definitions.

Review routing

Read the dated record below in full, including the backlog obligations. Explicit current founder instructions take precedence over repository copies. Historical quota notes are not evidence of current account availability, and a changed review route does not waive or close existing backlog obligations.

Dated founder routing record (preserved)

Founder override 2026-09-01:

  • Do not invoke Claude as a second opinion or reviewer for Codex-authored work. This supersedes older Strale plans, backlogs, and injected/static routing copies that require a Claude or cross-provider follow-up.
  • Use a fresh, separate Codex task for critical plan, exact-commit, and closeout verification. Pin gpt-5.6-sol at xhigh, give it a bounded read-only scope, and let the task finish after its verdict.
  • Claude Code may still be the primary environment when Petter chooses it; its critical outward transitions are reviewed by a fresh Codex task. Prior Claude verdicts remain valid historical evidence, but no new Claude-review backlog is created.

Amendment 2026-09-02 (founder, in session): Codex quota is exhausted. Until it returns, the independent review in the batch loop is performed by a fresh read-only Claude agent that did not author the batch; PRs say so, and docs/programs/cto-readiness/PROGRAM.md batch-loop step 6 carries the re-review obligation once Codex returns. The 2026-09-01 override otherwise stands.

Read the full file on GitHub · 845 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +1 lines · +394 tokens per session c0cd3b6a7adf
  2. yesterday Changed · +1 lines · +311 tokens per session 7d2d1f1d0451
  3. 4d ago Changed · +10 lines · +352 tokens per session b97b38cdeac6
  4. 5d ago Changed · +59 tokens per session 97a8307d6001
  5. 7d ago Changed · +1 lines · +307 tokens per session 34904d8f4e06
  6. 8d ago Changed · +5 lines · +371 tokens per session f17d3fcdbf20
  7. 9d ago Changed · +26 lines · +1,175 tokens per session 9e27f6ce3b46
  8. 12d ago Changed · +2 lines · +70 tokens per session 8c690f49e891
  9. 13d ago Changed · +6 lines · +1,460 tokens per session 8e6496e9bf7e
  10. 19d ago First seen · 793 lines · 18,171 tokens per session scan D c65b4d75db49

Subscribe to this mod's changes

strale CLAUDE.md is an instructions file published in the GitHub repository strale-io/strale (5 stars, last pushed yesterday), licensed MIT. It adds 22,670 tokens to every session, about $0.0907 per session on Opus 5.5. A static security scan graded it D with 3 findings (reads agent configuration directories, recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

ai-agentsapieu-ai-actmcpqualitytrust
Related

strale CLAUDE.md compared with instructions from other repositories

strale CLAUDE.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
strale CLAUDE.mdstrale-io/straleInstructions file5yesterdayMITD22,670Claude Code
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode