synkb CLAUDE.md

Repository instructions for Claude Code contributors to the synkb project. They point to the project’s documentation for architecture, contribution rules, implementation plans, decisions, and security guidance.

In plain words
What is it for?
Use them before working in synkb to find the right documentation, locate the relevant work package, follow repository rules, and run the expected checks.
Why use it?
They help an agent follow the project’s intended workflow and avoid changing the wrong scope or relying on outdated assumptions.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/syntax753/synkb/claude-md
Clone the repo
git clone --depth 1 https://github.com/Syntax753/synkb
Per session 983 This file is loaded in full into every session.
When invoked 983 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00983 $0.00983
Opus 5 $0.00491 $0.00491
Sonnet 5 $0.00197 $0.00197
Haiku 4.5 $0.00098 $0.00098

Measured yesterday against content hash b6ae0557c040, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

synkb CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 75 lines

How it starts

The opening of the file, as written. The whole thing — 75 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

Guidance for Claude Code working in this repository.

This file is deliberately short. It carries only what an agent needs that is not already written for humans, and points at the human docs for everything else. When guidance would apply equally to a human contributor, it belongs in CONTRIBUTING.md — not here. Two copies of one convention drift, and the drift is invisible until someone acts on the stale one.

Read these first

Question File
What is this project, how do I run it? README.md
Service conventions, shared-py, dev workflow, commit style CONTRIBUTING.md
What to build next, and what "done" means design/implementation-plan.md
Why is it like that? design/decision-log.md
Architecture and the demo→production mapping design/hld.md
UI labels and flows (source of truth) docs/user-guide.md
What is a deliberate demo weakness vs a bug SECURITY.md

Rules that are easy to get wrong

  • Work is scoped by work package. Locate the WP in design/implementation-plan.md and treat its acceptance criteria as the contract. Don't widen scope; if something belongs to a later WP, leave it.
  • Record non-obvious decisions in design/decision-log.md, newest at the top. The log is append-only: correct the record by adding an entry, never by editing history.
  • Documentation ships in the same commit as the change. A change without its doc update is incomplete — including docs/user-guide.md when a UI label or flow moves.
  • Never hand-edit apps/web/lib/api/schema.ts. It is generated from core-api's OpenAPI. Run make types and commit the result.
  • Unit tests are not sufficient for a mutation. vitest stubs fetch and skips core-api's proxy entirely, so a broken gateway path passes every unit test. Exercise new mutations against a live make demo stack before calling the work done.
  • DEMO_MODE branches are deliberate, not bugs to clean up. Production flips the flag and real auth takes over.
  • STUB: tools and "good enough for now" comments are intentional. They mark honest boundaries. Don't tidy them away — if a stub becomes real, delete the marker as part of that work.
  • Never commit machine-local paths, personal contact details, or secrets. The repo is public. The maintainer's only published contact route is LinkedIn peterturnerlondon; GitHub is Syntax753.

Read the full file on GitHub · 75 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 75 lines · 983 tokens per session scan A b6ae0557c040

Subscribe to this mod's changes

synkb CLAUDE.md is an instructions file published in the GitHub repository Syntax753/synkb (0 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 983 tokens to every session, about $0.0049 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.