Borrowing it
Nothing to install: this file belongs to v0id-user/setmac. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/v0id-user/setmac/main/CLAUDE.mdgit clone --depth 1 https://github.com/v0id-user/setmacWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/v0id-user/setmac/claude-md)<a href="https://agentmods.dev/instructions/v0id-user/setmac/claude-md"><img src="https://agentmods.dev/badge/instructions/v0id-user/setmac/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/v0id-user/setmac/claude-md"><img src="https://agentmods.dev/badge/instructions/v0id-user/setmac/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.04695 | $0.04695 |
| Opus 5.5 | $0.01878 | $0.01878 |
| Sonnet 5.5 | $0.00939 | $0.00939 |
| Haiku 4.5 | $0.00470 | $0.00470 |
Grade D, and why
setmac CLAUDE.md scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- **auth_required**: Sent at most once per run (it is cached after that): up front when a `requires_admin` tool still needs installing and `sudo -n true` fails, otherwise the first time an installer calls `sudo -A` (for Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
- `profile review` prints every install/check command verbatim, flags download-and-run (`curl | sh`), and lists dotfile locations, `sensitive_ok`, admin tools, taps and notes. `profile trust` / `update` confirm on a TTY Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- `profile review` prints every install/check command verbatim, flags download-and-run (`curl | sh`), and lists dotfile locations, `sensitive_ok`, admin tools, taps and notes. `profile trust` / `update` confirm on a TTY How it starts
The opening of the file, as written. The whole thing — 186 lines — stays where its author put it; the contents beside it link to each section on GitHub.
setmac
macOS developer environment installer — automates reinstalling all dev tools, apps, and configs after a fresh format.
Architecture
- SwiftUI macOS app (SPM, macOS 26+) — native sidebar UI, streams live status/logs
- Python CLI backend (
uv+click) — does all actual installing via subprocess - Public catalog
Resources/tools.json+ profiles — a profile (Resources/profiles/<name>/profile.jsonor the user's own folder) picks catalog tools and adds its own; the CLI merges them and the app shows the CLI's merged list - SwiftUI spawns CLI via
Process, reads JSON-line stdout, updates UI in real-time
Project Structure
Sources/ # SwiftUI app (SPM target: "Setmac")
├── App/ # SetmacApp.swift, ContentView.swift
├── Models/ # InstallState.swift, ToolManifest.swift
├── Navigation/ # SidebarItem, SidebarView, DetailView
├── Views/ # OverviewView, CategoryDetailView, ToolCardView, etc.
└── Services/ # CLIBridge.swift, ManifestLoader.swift (decode error text, devRepoRoot)
cli/ # Python CLI (uv project: "setmac-cli")
├── src/setmac/
│ ├── cli.py # click entry point
│ ├── output.py # JSON-line protocol (thread-safe)
│ ├── registry.py # Merged manifest, dependency graph, get_registry(ctx)
│ ├── profile.py # Profile resolution, loading, merging with the catalog
│ ├── gitprofile.py # Git profiles: clone, pin (lock), content hash
│ ├── trust.py # Trust store and the review text
│ ├── scanner.py # Secret and personal-data scanner for dotfiles
│ ├── export.py # Old all-in-one manifest -> private profile folder
│ ├── validate.py # Manifest and config-path rules (structured problems)
│ ├── commands/ # install, status, configs, brewfile, profile
│ └── installers/ # brew, script, custom dispatchers
Resources/
├── tools.json # Public tool catalog (no dotfiles, no personal tools)
├── profiles/ # Starter profiles: minimal, web, backend, mobile
├── icon.png # App icon source (1024x1024, drawn by scripts/draw-icon.swift)
└── Assets.xcassets # Accent color
scripts/ # build-cli.sh, bundle.sh, draw-icon.swift, generate-icon.sh, dmg.sh, classify-tools.py
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago Changed · +23 lines · +1,376 tokens per session scan B → D 1236b787e48d
- 13d ago Changed · +46 lines · +1,905 tokens per session scan A → B cb85c9740c60
- 2mo ago First seen · 117 lines · 1,414 tokens per session scan A 9ff576295fd0
setmac CLAUDE.md is an instructions file published in the GitHub repository v0id-user/setmac (16 stars, last pushed 6d ago), licensed MIT. It adds 4,695 tokens to every session, about $0.0188 per session on Opus 5.5. A static security scan graded it D with 3 findings (asks for root, downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
setmac CLAUDE.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| setmac CLAUDE.mdv0id-user/setmac | Instructions file | 16 | 6d ago | MIT | D | 4,695 | Claude Code |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |