skills: Instructions file for Claude Code

CLAUDE.md

skills CLAUDE.md is an instructions file for Claude Code from workos/skills. It costs 1,778 tokens per session, scanned A, a copy of skills AGENTS.md, MIT.

A set of WorkOS integration skills for Claude Code. WorkOS provides building blocks for login, single sign-on, user directories, roles, and access control.

In plain words
What is it for?
Building or maintaining AuthKit, SSO, Directory Sync, role-based access control, and fine-grained authorization integrations.
Why use it?
It gives the agent instructions and tools for implementing WorkOS features consistently in a project.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md. Also seen: mentions .claude-plugin; positional $N argument; mentions Claude Code.

This is workos/skills's own configuration. It tells Claude Code how to work on skills itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything skills configures →

Reuse

Borrowing it

Nothing to install: this file belongs to workos/skills. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/workos/skills/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/workos/skills

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for skills CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/workos/skills/claude-md/github.svg)](https://agentmods.dev/instructions/workos/skills/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/workos/skills/claude-md"><img src="https://agentmods.dev/badge/instructions/workos/skills/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for skills CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/workos/skills/claude-md"><img src="https://agentmods.dev/badge/instructions/workos/skills/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,778 This file is loaded in full into every session.
When invoked 1,778 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 94% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01778 $0.01778
Opus 5.5 $0.00711 $0.00711
Sonnet 5.5 $0.00356 $0.00356
Haiku 4.5 $0.00178 $0.00178

Measured 10d ago against content hash ec2df82f1da7, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

skills CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

94% identical to skills AGENTS.md — 6 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

CLAUDE.md · 134 lines

How it starts

The opening of the file, as written. The whole thing — 134 lines — stays where its author put it; the contents beside it link to each section on GitHub.

@workos/skills

Claude Code plugin providing WorkOS integration skills (AuthKit, SSO, Directory Sync, RBAC, FGA, etc.).

Commands

# Testing & formatting
pnpm test                     # run tests (vitest)
pnpm format                   # oxfmt
pnpm lint                     # oxlint

# Evals
pnpm eval -- --dry-run                        # verify cases load (no API key needed)
pnpm eval -- --no-cache                       # full run, skip cache
pnpm eval -- --no-cache --product=sso         # run specific product
pnpm eval -- --no-cache --case=sso-node-basic # run single case
pnpm eval -- --no-cache --fail-on-regression  # full run with gates
pnpm eval -- --no-cache --samples=2           # multi-sample for variance measurement
pnpm eval -- --no-cache --samples=2 --save-all-samples  # + persist all sample outputs

# Eval tooling
pnpm eval:diff -- --case=sso-node-basic       # side-by-side transcript diff with signal highlighting
pnpm eval:label -- --case=X --ship=yes --who=nick --reason="..."  # add human judgment
pnpm eval:calibrate                            # compare scorer vs human labels

Project Structure

  • .claude-plugin/marketplace.json — Claude Code marketplace catalog (source: ./plugins/workos)
  • .agents/plugins/marketplace.json — Codex marketplace catalog (source: ./plugins/workos)
  • .cursor-plugin/marketplace.json — Cursor marketplace catalog (mirrors Claude catalog)
  • plugins/workos/ — installable plugin (only this gets cached)
    • .claude-plugin/plugin.json — Claude Code plugin manifest
    • .codex-plugin/plugin.json — Codex plugin manifest
    • .cursor-plugin/plugin.json — Cursor plugin manifest (mirrors Claude manifest; versions synced by release-please)
    • skills/ — skill directories, each with SKILL.md
      • Hand-crafted AuthKit skills: workos-authkit-base, workos-authkit-nextjs, workos-authkit-react, workos-authkit-react-router, workos-authkit-tanstack-start, workos-authkit-vanilla-js, workos-widgets
      • Router: workos/SKILL.md — routes user requests to the right topic file or AuthKit skill
      • Topic files: workos/references/*.md — lean files with doc URLs + gotchas + optional endpoint tables
  • well-known/setup/SKILL.md — standalone setup skill that workos.com serves at /SKILL.md. Not part of the plugin; it condenses the router's "Start here" section, so update both together
  • scripts/ — eval framework (not cached with plugin)
    • tests/ — *.spec.ts files using vitest
    • build-well-known.ts — builds the /.well-known/agent-skills/ archives and index.json that .github/workflows/well-known.yml attaches to each release; workos.com serves the latest release's index, which points at that release's archives

Read the full file on GitHub · 134 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago Changed · +2 lines · +109 tokens per session ec2df82f1da7
  2. 2mo ago First seen · 132 lines · 1,669 tokens per session scan A e55b7497490e

Subscribe to this mod's changes

skills CLAUDE.md is an instructions file published in the GitHub repository workos/skills (46 stars, last pushed 6d ago), licensed MIT. It adds 1,778 tokens to every session, about $0.0071 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 94% identical to skills AGENTS.md, differing in 6 lines, and is treated as a copy.

Related

skills CLAUDE.md compared with instructions from other repositories

skills CLAUDE.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
skills CLAUDE.mdworkos/skillsInstructions file466d agoMITA1,778Claude Code
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA9,719GitHub Copilot
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA5,516GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149ktodayMITA4,680Codex, OpenCode
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA3,093GitHub Copilot
vscode model-prompts.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA2,022GitHub Copilot