Borrowing it
Nothing to install: this file belongs to auerbachb/claude-code-config. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/auerbachb/claude-code-config/main/.claude/skills/quotas/SKILL.mdgit clone --depth 1 https://github.com/auerbachb/claude-code-configWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/auerbachb/claude-code-config/quotas)<a href="https://agentmods.dev/skills/auerbachb/claude-code-config/quotas"><img src="https://agentmods.dev/badge/skills/auerbachb/claude-code-config/quotas/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/auerbachb/claude-code-config/quotas"><img src="https://agentmods.dev/badge/skills/auerbachb/claude-code-config/quotas.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00107 | $0.03995 |
| Opus 5 | $0.00053 | $0.01997 |
| Sonnet 5 | $0.00021 | $0.00799 |
| Haiku 4.5 | $0.00011 | $0.00400 |
Grade A, and why
quotas scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 266 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Report how much of each registered account's allowance is gone, when it comes back, and what continuing past it would cost — one row per account per window.
The cheapest-next hint never acts. It never switches accounts, never purchases anything, and never gates dispatch. It names an account and stops. Buying a Codex reset, enabling Claude usage credits, and raising a Cursor spend limit are the owner's actions, taken in the provider's own UI — do not offer to perform any of them, and do not treat "cheapest to continue on" as an instruction to re-route work. The prices it quotes are a checked-in table with
last verifieddates, so it is only as fresh as those dates.
The recorded history is display data too, and so is the projection over it. Every run appends one line per readable row to
~/.claude/ai-quotas-history.jsonl, and the START / %/DAY / LEFT columns are read back out of it. No dispatch gate reads that file or those columns, and none may start: they are not an input tocredit-budget.sh, not a reason to pause, defer, downgrade, or re-route anything. The projection says how fast an account is being drained, and that answer is printed to the owner, never acted on. Do not hand-edit the file, and do not compute your own verdict from it.
Display only — never a gate. Nothing this skill produces may gate dispatch, pause work, downgrade a model, defer a launch, or feed
credit-budget.sh. Quota and spend authority belongs to Anthropic's own in-app UI and upstream harness signals — see.claude/rules/safety.md§"Anthropic Quota & Spend Authority". This is a third, purely observational surface, distinct from the two that legitimately gate: the user-configureddaily_credit_budget_usdbudget and the#1427usage-horizon counter. The earlier/quotaskill was rolled back in issue #499 for exactly this — gating agent decisions on locally-read numbers. Answer the user's question and stop.
No credential value ever passes through you. The helper borrows each account's live token in place for one request — for Cursor, the token the Cursor IDE already holds for the signed-in user, turned into a session cookie in memory — and never prints any of them. Do not run a command that reads a credential out of the Keychain, a profile directory, or the Cursor IDE's state store yourself, and never repeat a token, cookie, or
auth.jsonbody into the conversation.
Step 1 — Resolve the helper
resolve_script() {
local name="$1" candidate
for candidate in \
"$HOME/.claude/skills-worktree/.claude/scripts/$name" \
"$HOME/.claude/scripts/$name" \
".claude/scripts/$name"; do
if [[ -x "$candidate" ]]; then echo "$candidate"; return 0; fi
done
return 1
}
AI_QUOTAS_SH=$(resolve_script ai-quotas.sh || true)
[[ -n "$AI_QUOTAS_SH" ]] || { echo "ERROR: ai-quotas.sh not found (checked all three paths) — quota reporting unavailable" >&2; exit 1; }
STOP if the helper does not resolve: print that one line and end. Do not hand-roll a reader — a second caller of the provider APIs is how two answers start disagreeing, and reading a credential by hand is exactly what this design forbids.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +44 lines · +7 tokens per session 5bd6adf35ebe
- yesterday Changed · +90 lines · +12 tokens per session 7b276ea4cf4b
- 2d ago Changed · +17 lines · +16 tokens per session ec93533910e8
- 3d ago First seen · 115 lines · 72 tokens per session scan A 6c66592c3de8
quotas is a skill published in the GitHub repository auerbachb/claude-code-config (5 stars, last pushed today), licensed MIT. It adds 107 tokens to every session and 3,995 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-09.
Other skills, from other repositories
community-research-insight
Extract structured insight briefs from community research transcripts or notes. Produces pain points, stakeholder needs, opportunity maps, risks, and follow-up questions. Requires human review before publication.
docs
Use when documentation generally needs to catch up with a branch before pushing or merging, covering internal developer docs, external customer-facing docs, and release notes together — "update the docs", "do a docs pass before I merge", "make sure everything's documented". Prefer this when no single documentation…
install-jazz-github-action
Set up Jazz as a GitHub Action for automated PR code review and on-demand /jazz PR assistance. Use when the user asks to add Jazz to CI, create a GitHub Action workflow, set up PR review automation, enable /jazz commands on PRs, or integrate Jazz with GitHub.
analysis-provenance
Identify code ownership before modifying validators or linters. Checks file headers for provenance indicators, reviews documentation, and determines provenance as UPSTREAM, LOCAL, VENDOR, or UNKNOWN. Prevents accidental modification of upstream tools.
pir-action-tracker
Parses Post-Incident Review (PIR) pages in a Confluence space, fetches live status from referenced Jira tickets, updates action item tables with current status and due dates, marks completed PIRs with a visual closure panel, and surfaces any overdue actions for follow-up. Designed for Customer Success, Support, and…
robin
Use whenever an agent creates, updates, reviews, or completes a GitHub pull request. Detect whether Robin is installed in the repository; when it is, automatically drive the PR through a bounded review, verified-fix, reply, thread-resolution, re-review, authorized-merge, and cleanup loop without requiring the user to…