An interactive setup wizard for configuring Claude Code, an AI coding tool, for a new project.

Use it when adopting the bp- best-practices system, setting up Claude Code for the first time, or configuring project rules and verification workflows.

It turns a project’s detected technology stack and workflow preferences into shared or personal instructions, permissions, hooks, and helper agents.

bp-setup — Skill for Claude Code by kulmam92

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add kulmam92/cc-best-practices-marketplace --skill bp-setup

Clone the repo

git clone --depth 1 https://github.com/kulmam92/cc-best-practices-marketplace

Made for: Claude Code.

Or install cc-best-practices, the plugin that ships this one along with the rest of its 6 skills, 1 hook.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/kulmam92/cc-best-practices-marketplace/bp-setup/github.svg)](https://agentmods.dev/skills/kulmam92/cc-best-practices-marketplace/bp-setup)

Your own site

<a href="https://agentmods.dev/skills/kulmam92/cc-best-practices-marketplace/bp-setup"><img src="https://agentmods.dev/badge/skills/kulmam92/cc-best-practices-marketplace/bp-setup/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/kulmam92/cc-best-practices-marketplace/bp-setup"><img src="https://agentmods.dev/badge/skills/kulmam92/cc-best-practices-marketplace/bp-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 69 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 4,927 The whole file, excluding the scripts and references it only reads on demand.

Security scan D 3 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00069	$0.04927
Opus 5.5	$0.00028	$0.01971
Sonnet 5.5	$0.00014	$0.00985
Haiku 4.5	$0.00007	$0.00493

Measured 2mo ago against content hash 1da6528b981c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade D, and why

bp-setup scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Strips warnings and disclaimersmediumAnti-refusal

Omitting safety caveats hides risk from the user and is a common jailbreak preamble.

3. Verify build succeeds without warnings

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

if grep -q '"bash \.claude/' "$FILE" 2>/dev/null; then

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

"Bash(rm -rf *)",

plugins/cc-best-practices/skills/bp-setup/SKILL.md · 426 lines

How it starts

The opening of the file, as written. The whole thing — 426 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Interactive Project Setup Wizard

Configure CLAUDE.md, .claude/settings.json, hooks, rules, and agents for your specific project. This skill auto-detects your stack and walks you through each configuration step.

Phase 0: Setup Mode

If no CLAUDE.md exists at the project root (first-time setup), show a brief orientation before the first question:

bp-setup configures Claude Code for your project (~7 questions, about 2 minutes). It creates a CLAUDE.md file with your build commands, project structure, and workflow rules.

Skip this orientation if CLAUDE.md already exists (re-run scenario).
Ask the developer: "Are you setting this up for yourself or for your team?"
- Solo/personal: hooks go to .claude/settings.local.json (gitignored), rules to ~/.claude/rules/
- Team: hooks go to .claude/settings.json (shared), rules to .claude/rules/ (shared). Remind to submit changes as a PR for team review.

Phase 1: Deploy CLAUDE.md Template

Check if the project already has a CLAUDE.md at the project root.
- If NO: Copy the template below to the project root as CLAUDE.md.
- If YES: Read it and count its lines. Determine if it is already the best practices template (first heading is # Best Practices -- Claude Code Workflow).
  
  If it IS already the best practices template, only offer (a) and (b): (a) Merge any new best practices into the existing CLAUDE.md (b) Replace it with a fresh best practices template
  
  If it is NOT the best practices template, offer all three: (a) Merge best practices into the existing CLAUDE.md (b) Replace it with the best practices template (c) Migrate existing CLAUDE.md to .claude/rules/ and deploy the template
  
  If CLAUDE.md is >100 lines or appears framework-managed (structured phases, procedural workflow, large instruction sets), recommend (c) and explain: "Your existing CLAUDE.md is large/framework-managed. Migrating it to a rules file keeps it active while freeing CLAUDE.md for best practices config."

Read the full file on GitHub · 426 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 426 lines · 69 tokens per session scan D 1da6528b981c

Subscribe to this mod's changes

bp-setup is a skill published in the GitHub repository kulmam92/cc-best-practices-marketplace (2 stars, last pushed 7mo ago), licensed MIT. It adds 69 tokens to every session and 4,927 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it D with 3 findings (strips warnings and disclaimers, reads agent configuration directories, recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Building agents

bp-setup next to 6 skills from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
bp-setupkulmam92/cc-best-practices-marketplace	Skill	2	7mo ago	MIT	D	69	Claude Code
imagegenopenai/codex	Skill	134k	today	Apache-2.0	A	113	Codex
playwright-climicrosoft/playwright	Skill	99k	today	Apache-2.0	A	19	Claude Code
local-ai-agentsmicrosoft/ai-agents-for-beginners	Skill	79k	today	MIT	A	200	Claude Code, Codex
systematic-debuggingobra/superpowers	Skill	314k	3d ago	MIT	A	21	Claude Code
next-cache-components-adoptionvercel/next.js	Skill	143k	yesterday	MIT	A	95	Claude Code
next-partial-prefetching-adoptionvercel/next.js	Skill	143k	yesterday	MIT	A	103	Claude Code

bp-setup