Borrowing it
Nothing to install: this file belongs to yifanzz/claude-code-boost. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/yifanzz/claude-code-boost/main/AGENTS.mdgit clone --depth 1 https://github.com/yifanzz/claude-code-boostWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/yifanzz/claude-code-boost/agents-md)<a href="https://agentmods.dev/instructions/yifanzz/claude-code-boost/agents-md"><img src="https://agentmods.dev/badge/instructions/yifanzz/claude-code-boost/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/yifanzz/claude-code-boost/agents-md"><img src="https://agentmods.dev/badge/instructions/yifanzz/claude-code-boost/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.02467 | $0.02467 |
| Opus 5.5 | $0.00987 | $0.00987 |
| Sonnet 5.5 | $0.00493 | $0.00493 |
| Haiku 4.5 | $0.00247 | $0.00247 |
Grade D, and why
claude-code-boost AGENTS.md scanned grade D with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
- `--user`: Install to user settings (`~/.claude/settings.json`) Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
- **Destructive-only blocking** - Only blocks genuinely harmful operations (rm -rf /, system wipes) This is a copy
100% identical to skills AGENTS.md — 264 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 263 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md
This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
Project Overview
Claude Code Boost is a TypeScript-based CLI tool that provides intelligent auto-approval hooks for Claude Code. It enhances developer productivity by automatically approving safe development operations while blocking genuinely destructive commands.
Architecture
The project follows a simple CLI architecture:
- Entry Point:
src/index.ts- Uses Commander.js for CLI structure - Main Command:
src/commands/auto-approve-tools.ts- Core logic for tool approval decisions - Hook Integration: Processes Claude Code PreToolUse hooks via stdin/stdout JSON communication
- AI-Powered Decisions: Falls back to Claude API for complex approval decisions
- Type Safety:
src/types/hook-schemas.ts- Zod schemas for input/output validation - Security Model: Two-tier approval system:
- Fast approval for unambiguously safe tools (Read, LS, Glob, etc.)
- AI-powered analysis for complex operations using
prompts/system-prompt.md
Development Commands
Build and Test
npm run build # TypeScript compilation to dist/
npm run type-check # Type checking without compilation
npm run test # Run test suite with Vitest
npm run test:watch # Watch mode for tests
npm run test:env # Run tests with .env.local file
Linting and Formatting
npm run lint # ESLint checking
npm run lint:fix # Auto-fix linting issues
npm run prettier # Format code with Prettier
npm run prettier:check # Check code formatting
Development
npm run dev # Run CLI with tsx (development mode)
npm run prepublishOnly # Full build + test + lint pipeline
CLI Testing
# Test the CLI locally (requires ANTHROPIC_API_KEY env var or config.json)
echo '{"session_id":"test","transcript_path":"/tmp/test","tool_name":"Read","tool_input":{"file_path":"/test"}}' | ANTHROPIC_API_KEY=your_key npm run dev auto-approve-tools
# Test with API authentication
echo '{"session_id":"test","transcript_path":"/tmp/test","tool_name":"Read","tool_input":{"file_path":"/test"}}' | npm run dev auto-approve-tools
# Install CCB hook to Claude Code settings
npm run build && node dist/index.js install --user # Install to user settings
npm run build && node dist/index.js install --project # Install to project settings
npm run build && node dist/index.js install --project-local # Install to project local settings
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +262 lines · +2,463 tokens per session scan A → D a5ba0ff8169c
- 2mo ago First seen · 1 lines · 4 tokens per session scan A 6ebdb617a810
claude-code-boost AGENTS.md is an instructions file published in the GitHub repository yifanzz/claude-code-boost (165 stars, last pushed 12d ago), licensed MIT. It adds 2,467 tokens to every session, about $0.0099 per session on Opus 5.5. A static security scan graded it D with 2 findings (reads agent configuration directories, recursive force delete). It is 100% identical to skills AGENTS.md, differing in 264 lines, and is treated as a copy.
claude-code-boost AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| claude-code-boost AGENTS.mdyifanzz/claude-code-boost | Instructions file | 165 | 12d ago | MIT | D | 2,467 | Claude Code, Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 9,719 | GitHub Copilot |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 5,516 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 3,093 | GitHub Copilot |
| vscode model-prompts.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 2,022 | GitHub Copilot |