claude-org-ja: Skill for Claude Code

.claude/skills/org-setup/SKILL.md

org-setup is a skill for Claude Code from suisya-systems/claude-org-ja. It costs 87 tokens per session (3,457 once invoked), scanned C, original, MIT.

A setup procedure that places Claude Code permission settings and environment variables for the organisation's coordinator, dispatcher, curator, and workers.

In plain words
What is it for?
It helps install or update role-specific permissions, configure messaging access, and generate or check the required Claude Code settings.
Why use it?
Each role may start in a different directory and therefore needs its own correctly scoped settings. The procedure keeps messaging permissions and generated configuration aligned with the selected transport system.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: reads .claude/ paths; mentions Claude Code.

This is suisya-systems/claude-org-ja's own configuration. It tells Claude Code how to work on claude-org-ja itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything claude-org-ja configures →

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is Bash(python tools/org_setup_prune.py:*).

Reuse

Borrowing it

Nothing to install: this file belongs to suisya-systems/claude-org-ja. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/suisya-systems/claude-org-ja/main/.claude/skills/org-setup/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/suisya-systems/claude-org-ja

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for org-setup

README.md
[![agentmods](https://agentmods.dev/badge/skills/suisya-systems/claude-org-ja/org-setup/github.svg)](https://agentmods.dev/skills/suisya-systems/claude-org-ja/org-setup)
Your own site
<a href="https://agentmods.dev/skills/suisya-systems/claude-org-ja/org-setup"><img src="https://agentmods.dev/badge/skills/suisya-systems/claude-org-ja/org-setup/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for org-setup

Your own site · 80×15
<a href="https://agentmods.dev/skills/suisya-systems/claude-org-ja/org-setup"><img src="https://agentmods.dev/badge/skills/suisya-systems/claude-org-ja/org-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 87 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,457 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 2 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00087 $0.03457
Opus 5 $0.00044 $0.01729
Sonnet 5 $0.00017 $0.00691
Haiku 4.5 $0.00009 $0.00346

Measured 8d ago against content hash 6e68cd6120f8, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade C, and why

org-setup scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

| ユーザー共通 | `~/.claude/settings.json` | 全プロジェクト・全ロール |

Unrestricted tool accessmediumExcessive agency

A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.

例: 窓口で `Bash(my-private-tool:*)` を恒久的に許可したい場合は
.claude/skills/org-setup/SKILL.md · 215 lines

How it starts

The opening of the file, as written. The whole thing — 215 lines — stays where its author put it; the contents beside it link to each section on GitHub.

org-setup: 組織の許可設定を一括配置

組織の各ロールが必要とする permissions allow と環境変数を、 正しいスコープの settings ファイルに配置する。

輸送層 両系(ORG_TRANSPORT: 既定 renga / opt-in broker: 本スキルが配る messaging MCP の allow は 既定 rengaORG_TRANSPORT 無設定)で mcp__renga-peers__* tier。references/permissions.md は renga アンカー(byte 比較対象)として不変であり、broker への置換は prose ではなく生成/検証ツール側で行う: tools/org_setup_prune.py(per-role allow / --user-common-allowlist)と tools/check_role_configs.pyORG_TRANSPORT=broker のとき mcp__renga-peers__* ブロックを broker messaging tier(mcp__org-broker__*)に射影する(runtime の transport_allowlist descriptor 駆動、Epic #6 E)。既定 renga は恒等(生成物 byte 等価・file no-op)なので本スキルの手順・報告文はそのまま使えばよい。設計 SoT は transport-lab docs/design/ja-migration-plan.md §5.3、契約面は docs/contracts/backend-interface-contract.md Surface 8(ratified 2026-06-14)。

設定ファイルの配置先とスコープ

Claude Code は起動ディレクトリの .claude/ 配下から設定を読み込む。 サブディレクトリで起動した場合、親ディレクトリの設定は読み込まれない。 そのため、ロールごとに独立した設定ファイルが必要になる。

スコープ ファイルパス 対象
ユーザー共通 ~/.claude/settings.json 全プロジェクト・全ロール
窓口 <repo>/.claude/settings.local.json リポジトリルートで起動した窓口
ディスパッチャー <repo>/.dispatcher/.claude/settings.local.json .dispatcher/ で起動したディスパッチャー
キュレーター <repo>/.curator/.claude/settings.local.json .curator/ で起動したキュレーター
ワーカー ワーカーディレクトリの .claude/settings.local.json org-delegate が動的に作成

各ロールの必要設定

references/permissions.md に全ロールのJSON定義がある。以下の手順でこれを参照する。

実行手順

Step 1: 現在の設定を読み取る

以下の4ファイルを読み取る(存在しない場合は空オブジェクト扱い):

  1. ~/.claude/settings.json
  2. <repo>/.claude/settings.local.json
  3. <repo>/.dispatcher/.claude/settings.local.json
  4. <repo>/.curator/.claude/settings.local.json

Step 2: 差分を特定する

各ファイルについて、上記「各ロールの必要設定」と比較し、不足しているエントリを特定する。

Step 3: マージして書き込む

不足分を追加する。既存の設定は絶対に削除しないpermissions.allow は配列なので、既存エントリを保持しつつ新規エントリを追加する。 env はオブジェクトなので、既存キーを保持しつつ新規キーを追加する。

Step 3.5: operator-local な生成ファイルを配置する(未配置時のみ)

Read the full file on GitHub · 215 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 215 lines · 87 tokens per session scan C 6e68cd6120f8

Subscribe to this mod's changes

org-setup is a skill published in the GitHub repository suisya-systems/claude-org-ja (5 stars, last pushed 2d ago), licensed MIT. It adds 87 tokens to every session and 3,457 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it C with 2 findings (reads agent configuration directories, unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.