agentmods.dev

clickmem

Agent settings that send information to a local Clickmem service when a prompt is submitted and after a tool is used.

In plain words
What is it for?
They are for connecting the agent to Clickmem at a local address during prompts and tool use.
Why use it?
They let a locally running service receive these agent events automatically.

Settings file for Claude Code

58 2mo ago B scan tokens not measured original MIT
View the source file auxten/clickmem
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add settings/auxten/clickmem/settings
Clone the repo
git clone --depth 1 https://github.com/auxten/clickmem

Made for: Claude Code.

Per session not measured What this adds to a session before it is invoked.
When invoked not measured Not applicable: nothing here is loaded into a session.
Security scan B 2 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Security

Grade B, and why

clickmem scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Sends data to an external URLmediumData exfiltration

A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.

"command": "curl -s -X POST http://127.0.0.1:9527/hooks/claude-code -d @-"

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

"command": "curl -s -X POST http://127.0.0.1:9527/hooks/claude-code -d @-"
scripts/audit_install_helpers/fixtures/fake_home_template/.claude/settings.json · 28 lines

What it actually says

{
  "enabledPlugins": {
    "clickmem@local": true
  },
  "hooks": {
    "UserPromptSubmit": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "curl -s -X POST http://127.0.0.1:9527/hooks/claude-code -d @-"
          }
        ]
      }
    ],
    "PostToolUse": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "curl -s -X POST http://127.0.0.1:9527/hooks/claude-code -d @-"
          }
        ]
      }
    ]
  }
}
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 28 lines scan B 9e5ab956b542

Subscribe to this mod's changes

clickmem is a settings file published in the GitHub repository auxten/clickmem (58 stars, last pushed 2mo ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it B with 2 findings (sends data to an external url, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Data and AI
Related

Other settings, from other repositories

supabase

Agent settings declaring 2 hook events (SessionStart, PostToolUse).

supabase/supabase · not measured

claude-cookbooks

Agent settings declaring 2 hook events (SessionStart, PreToolUse).

anthropics/claude-cookbooks · not measured

claude-code-best-practice

Agent settings declaring 30 hook events (PreToolUse, PermissionRequest, PostToolUse, PostToolUseFailure) and 24 allowed tools.

shanraisshan/claude-code-best-practice · not measured

electron

Agent settings declaring 17 allowed tools.

electron/electron · not measured

uv

Agent settings declaring 2 hook events (SessionStart, PostToolUse).

astral-sh/uv · not measured

ui-ux-pro-max-skill

Agent settings declaring 7 allowed tools.

nextlevelbuilder/ui-ux-pro-max-skill · not measured