Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/vkorost/java-swing-mcp/claude-mdgit clone --depth 1 https://github.com/vkorost/java-swing-mcpWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.02319 | $0.02319 |
| Opus 5 | $0.01159 | $0.01159 |
| Sonnet 5 | $0.00464 | $0.00464 |
| Haiku 4.5 | $0.00232 | $0.00232 |
Grade C, and why
java-swing-mcp CLAUDE.md scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -s http://localhost:9222/screenshot | python -c " Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s -X POST http://localhost:9222/action -H "Content-Type: application/json" \ How it starts
The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Claude Code Instructions for Swing MCP Project
Project Overview
An Equity Trading demo app built with Java Swing, with an embedded MCP (Model Context Protocol) HTTP server on localhost:9222 for programmatic UI interaction and testing.
Project Structure
c:\WORKSPACE\Claude.Swing.Test.MCP\
├── swing-mcp-server/ # Main project (Gradle multi-module)
│ ├── build.gradle # Root build file
│ ├── settings.gradle # Includes swing-mcp-lib + demo-app
│ ├── gradlew / gradlew.bat # Gradle 8.5 wrapper
│ ├── swing-mcp-lib/ # MCP server library (SwingMcpServer)
│ │ └── src/main/java/com/swingmcp/server/
│ └── demo-app/ # Trading app demo
│ └── src/main/java/com/swingmcp/demo/
│ ├── TradingApp.java # Main entry point
│ ├── FrameBuilder.java # Main frame + internal frames
│ ├── ComponentManager.java # Component creation + management
│ ├── ResourceManager.java # Global resources (frame, desktop, status bar)
│ ├── LayoutManager.java # Window position persistence
│ ├── PanelBuilder.java # Panel factory
│ ├── InstrumentPanel.java # Portfolio tree (sectors + symbols)
│ ├── QuotePanel.java # Live market data table (ticks 3x/sec)
│ ├── BlotterPanel.java # Order blotter (11 columns)
│ ├── OrderFrame.java # Order ticket layout (null layout)
│ ├── Order.java # Order ticket logic + click handlers
│ ├── StatusBarPanel.java # Status bar with system info
│ ├── MenuManager.java # Menu bar setup
│ ├── MenuActionListener.java # Menu action handlers
│ ├── RequestHandler.java # Async order processing
│ ├── AppLogger.java # Logging + status bar
│ ├── AbstractPanel.java # Base panel class
│ └── TradingBlotterApp.java # Standalone blotter demo
└── orchestrator/ # Python MCP orchestrator
└── (requires anthropic, requests, Pillow)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 192 lines · 2,319 tokens per session scan C b1959a65afb5
java-swing-mcp CLAUDE.md is an instructions file published in the GitHub repository vkorost/java-swing-mcp (2 stars, last pushed 4mo ago), licensed MIT. It adds 2,319 tokens to every session, about $0.0116 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
spartan CLAUDE.md
Instructions for spartan-ng/spartan, covering working in this repo (notes for claude / ai agents), before pushing: run the ci checks locally and pull requests.
starwind-ui AGENTS.md
Instructions for starwind-ui/starwind-ui, covering agents.md, project shape, useful commands and contribution conventions.
Codex-Skills AGENTS.md
Instructions for TheGoat395/Codex-Skills, covering repository operating notes, required checks, evidence rules and change hygiene.
ACCESSIBILITY.md AGENTS.md
Instructions for mgifford/ACCESSIBILITY.md, covering repository instructions for ai coding agents, scope, when each instruction file is useful, project mission and status and required project context.
barkeep AGENTS.md
Instructions for iannuttall/barkeep, covering agent notes, product rules, repo map, commands and app structure.
Lumeo CLAUDE.md
Instructions for Brain2k-0005/Lumeo, covering lumeo — project rules, rule #1: no assistant branding in commits, architecture, build commands and coding conventions.