Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/xiaotonng/pikiloom/claude-mdgit clone --depth 1 https://github.com/xiaotonng/pikiloomWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/xiaotonng/pikiloom/claude-md)<a href="https://agentmods.dev/instructions/xiaotonng/pikiloom/claude-md"><img src="https://agentmods.dev/badge/instructions/xiaotonng/pikiloom/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01620 | $0.01620 |
| Opus 5 | $0.00810 | $0.00810 |
| Sonnet 5 | $0.00324 | $0.00324 |
| Haiku 4.5 | $0.00162 | $0.00162 |
Grade A, and why
pikiloom CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 130 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Pikiloom
A layered, open Agent orchestrator. Not "an IM bridge for coding agents" — IM is one of several pluggable terminals.
Four layers (top → bottom):
- Terminal — IM channels and the Web Dashboard are equal, pluggable entry points.
- Agent — Wraps best-in-class agents (Claude Code, Codex, Gemini, Hermes) through a driver registry; ACP-compatible agents plug in via the same contract.
- Model — Routes across frontier models (Claude, GPT/Codex, Gemini), domestic Chinese series (DeepSeek, 豆包, MiMo, MiniMax), OpenRouter, and any OpenAI-compatible proxy. Providers + Profiles vault injects credentials per agent at spawn time.
- Tool — Skills, MCP servers, CLI tools, merged across global / workspace scopes.
The orchestrator is the product. Lead with the layered framing.
Project Structure
src/
core/ Zero-business-logic infrastructure
constants.ts Centralized timeouts, retries, numeric constants
logging.ts Structured logging with scoped writers
platform.ts Cross-platform OS primitives (IS_WIN, path, which)
process-control.ts Restart coordination, watchdog, process tree kill
utils.ts Pure utilities
version.ts Package version
config/
user-config.ts ~/.pikiloom/setting.json load/save/sync
runtime-config.ts Runtime agent / model / effort resolution
validation.ts Channel credential validation
catalog/ Data-only manifests for the Extensions page
mcp-servers.ts Recommended MCP servers
cli-tools.ts Recommended CLIs
skill-repos.ts Recommended skill repos
agent/ Agent abstraction layer
driver.ts AgentDriver interface + pluggable registry
drivers/{claude,claude-tui,codex,gemini,hermes}.ts
session.ts Session workspace CRUD, classification
stream.ts CLI spawn framework, stream orchestration
skills.ts Project skill discovery (.pikiloom/skills)
skill-installer.ts Wrapper around `npx skills add`
auto-update.ts Background agent CLI version checking
cli/ External CLI tool detection + OAuth-web auth
mcp/
bridge.ts Per-stream MCP bridge orchestration
session-server.ts Stdio MCP server for agent CLIs
registry.ts Recommended MCP server types
extensions.ts MCP extension CRUD + session merge
oauth.ts MCP OAuth 2.1 + Dynamic Client Registration
tools/{workspace,ask-user,types}.ts
bot/ Channel-agnostic bot runtime
bot.ts Bot base class: chat state, runStream()
commands.ts Structured command data
command-ui.ts Selection UI models, action executor
orchestration.ts Message pipeline helpers
human-loop.ts Human-in-the-loop state machine (Codex + im_ask_user)
streaming.ts / render-shared.ts / menu.ts / host.ts / session-hub.ts / session-status.ts
channels/ Physically isolated IM implementations
base.ts Abstract Channel transport + capability flags
telegram/ feishu/ weixin/ slack/ discord/ dingtalk/ wecom/
dashboard/ Hono HTTP server + React SPA
server.ts / runtime.ts / platform.ts / session-control.ts
routes/{config,agents,sessions,extensions,cli}.ts
cli/ CLI entry points
main.ts --daemon / --no-daemon / --setup / MCP serve
channels.ts / setup-wizard.ts / onboarding.ts / run.ts
browser-profile.ts Managed Chromium profile dir for Playwright
browser-supervisor.ts Process-singleton: probe / ensure / invalidate
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 130 lines · 1,620 tokens per session scan A 19516bbfdc74
pikiloom CLAUDE.md is an instructions file published in the GitHub repository xiaotonng/pikiloom (294 stars, last pushed 4d ago), licensed MIT. It adds 1,620 tokens to every session, about $0.0081 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
superpowers GEMINI.md
Gemini CLI instructions for obra/superpowers, a project described as: An agentic skills framework & software development methodology that works.
aider-desk AGENTS.md
AGENTS.md instructions for hotovo/aider-desk, covering agents.md, common commands, development, type checking and linting and formatting.
llm-context.py CLAUDE.md
Instructions for cyberchitta/llm-context.py, covering claude.md, working notes (gitignored) and draining the field notes.
zapo CLAUDE.md
Instructions for vinikjkkj/zapo: The contributor handbook for this repository lives in AGENTS.md. Read that file and follow it as your primary source of project conventions, architecture rules, performance constraints, and review anti-patterns.
Silex AGENTS.md
AGENTS.md instructions for silexlabs/Silex, covering agents.md, tech stack, run it locally, building the desktop app and when writing code for silex (editing source).
SoDam-WikiMate AGENTS.md
AGENTS.md instructions for sodam-ai/SoDam-WikiMate, covering wikimate 작업 규칙 (크로스툴 — claude code · codex · gemini 공용), 문체, 자동 동작 (자연어 트리거 — 강제 호출 불필요), 접근 규칙 (자동 감지 — 특정 도구에 한정하지 않음) and obsidian 규칙.