Borrowing it
Nothing to install: this file belongs to zpoint/vibe-seller. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/zpoint/vibe-seller/main/CLAUDE.mdgit clone --depth 1 https://github.com/zpoint/vibe-sellerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/zpoint/vibe-seller/claude-md)<a href="https://agentmods.dev/instructions/zpoint/vibe-seller/claude-md"><img src="https://agentmods.dev/badge/instructions/zpoint/vibe-seller/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/zpoint/vibe-seller/claude-md"><img src="https://agentmods.dev/badge/instructions/zpoint/vibe-seller/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.05518 | $0.05518 |
| Opus 5 | $0.02759 | $0.02759 |
| Sonnet 5 | $0.01104 | $0.01104 |
| Haiku 4.5 | $0.00552 | $0.00552 |
Grade A, and why
vibe-seller CLAUDE.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
## Driving the app from curl? Send what the FRONTEND would send How it starts
The opening of the file, as written. The whole thing — 306 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Vibe Seller - Claude Code Context
For full documentation: See docs/dev-guide.md (user-facing landing page is README.md)
What & Why
Team collaboration platform for e-commerce store automation. Users create browser-automation tasks organized by store, executed via browser-use CLI (Chrome/Ziniao) with real-time SSE streaming.
Tech Stack
- Backend: Python 3.11+ / FastAPI / SQLAlchemy 2.0 async / SQLite (
~/.vibe-seller/data/vibe_seller.db) / SSE - Frontend: React 19 / TypeScript / Vite / Tailwind CSS 4 / react-i18next
- Browser: browser-use CLI with pluggable backends (Chromium engine)
Key Conventions
- Component-based frontend:
App.tsx(state + layout shell) delegates toviews/(TasksView, EventsView, WorkspaceView, SettingsView),components/(Sidebar, modals, UI primitives),hooks/(useSSE), with sharedtypes.tsandapi.ts - Optional integration bundles (e.g. Google Workspace) install per-user via Settings → Integrations; see
app/workspace/gws_integration.py. - Pluggable browser backends in
app/browser/(base.py defines interface); multi-client CDP proxy incdp_mux_proxy.pyfor concurrent per-store tasks - AI agent abstraction in
app/ai/(AIAgentBackendABC,ClaudeCodeBackendimpl) - System prompts in
app/prompts/*.md— loaded once at import viaapp/prompts/__init__.py - Tasks auto-execute on creation in auto mode (default,
plan_mode=false):bypassPermissions, PENDING → RUNNING → COMPLETED. Opt-in plan mode (plan_mode=true): agent plans in read-only mode, user reviews, then executes (PENDING → DESIGNING → PLANNED → RUNNING → COMPLETED). Toggle via Auto/Plan switch in task detail footer. Non-store tasks always use plan mode. Plan-mode schedules author the plan once at creation via anis_plan_only=TrueTask (user reviews, plan is frozen onSchedule.plan,plan_status=ready); each subsequent fire copies the frozen plan and skips planning. Seeapp/plan_states.py+ docs/subsystems.md. - JWT cookie auth (httpOnly, 7-day expiry)
- UUIDs for all primary keys
- API routes prefixed with
/api/ - i18n translations in
frontend/src/i18n/locales/{en,zh}/ - Ad tasks declare their kind + scope before working, and are held to what they declared. The ad skills tell the agent to call
vibe_seller_declare_ad_task(kind∈ audit/create/execute/investigate,scope= combos/campaigns/products) before touching a browser. That declaration — not the shape of the report — decides how much marketplace coverage the completeness gate demands and whether the user gets a review console. Declarations are append-only and a new one needs a new USER message, so an agent cannot re-declare around a gate. Never reintroduce an "is this an audit?" heuristic over the agent's own output: that is what let a two-campaign task be told it owed five marketplaces, which it satisfied by transcribing the previous week's report. Seeapp/ai/ad_declaration.pyand docs/api.md.- The in-turn ratchet (
ad_declaration.supersedes) — a re-declaration inside the same turn may never widen reach and may never shed an obligation. Two moves qualify: narrowing at the same kind (recording campaign ids you could only learn by enumerating), and correctinginvestigate→auditat the same-or-narrower scope. The upgrade is legal precisely because it adds what the phase owes — coverage plus a console — so it is not an escape hatch;audit→investigateand every other pair stay refused. Without it, a phase that under-declared had no move but to delete the recommendations the user asked for. - Scope of the guarantee — the requirement rides on the ad skills:
declaration_gapslives insidead_completeness_review, which those skills register viagates:frontmatter, so a run that never loads an ad skill can finish without declaring. That is the fail-safe direction and is intentional: no declaration → no console → nothing over-wide is offered. Do not "fix" it by inferring a declaration from the report — that is the heuristic above, wearing a new hat. Within that gate, the checks that compare a report against an existing declaration are not so limited, and must not be scoped to incidental formatting: the "investigatemay not hand out decisions" check deliberately runs whether or not the report carries## <platform> <CC>sections, because conditioning it on headings let a bid review declaredinvestigatedeliver bid changes with no console and no gap raised.
- The in-turn ratchet (
- Agents write to
stores/andknowledge/via MCPvibe_seller_write_workspace_file(not the built-in Write tool — it can't write through workspace symlinks; see docs/workspace.md)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 306 lines · 5,518 tokens per session scan A eb62f73ee5f3
vibe-seller CLAUDE.md is an instructions file published in the GitHub repository zpoint/vibe-seller (64 stars, last pushed today), licensed Apache-2.0. It adds 5,518 tokens to every session, about $0.0276 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.