How real projects brief Claude Code: the commands, conventions and warnings they put in CLAUDE.md.
maddhruvCLAUDE.mdmaddhruv/absolute/CLAUDE.md
reference, etc.) absolute-upgrade/ # Dependency upgrades SKILL.md README.md references/health-engine.md absolute-audit/ # Vulnerability & security scan SKILL.md README.md references/health-engine.md absolute-prune/ # Dead code & dependency cleanup SKILL.md README.md references/health-engine.md absolute-debt/ # Lint & typecheck
NicholasSpisakCLAUDE.mdNicholasSpisak/claude-code-subagents/CLAUDE.md
UI/UX components, accessibility, performance, mobile-first development - `systems-architect`: System design, scalability, architectural decisions - `security-threat-analyst`: Security assessments, threat modeling, vulnerability analysis - `performance-optimizer`: Performance analysis, bottleneck elimination, optimization
avivsinaiCLAUDE.mdavivsinai/bitbucket-cli/CLAUDE.md
breaking user-facing auth change and must not be done as generic security hardening. Keep `scripts/check-oauth-release-contract.sh` in CI/release verification. - See `docs/RELEASE.md` for the full release handbook. ## Commit & Pull Request Guidelines
IRISX-AICLAUDE.mdIRISX-AI/IRIS-AI/CLAUDE.md
immersive desktop environment featuring a real-time conversational WebRTC audio pipeline, biometric security (Face ID), and full file-system/hardware control. ## Tech Stack - **Framework:** Electron (Main) + React (Renderer) + Vite. - **Language
dmarcguardhqCLAUDE.mddmarcguardhq/parse-dmarc/CLAUDE.md
commit in PRs) - golangci-lint for Go linting - Docker build with cosign signing - Kubescape security scanning - Release automation via release-please and goreleaser - Multi-platform Docker images (amd64, arm64) - Lockfile
xiaojiou176-openCLAUDE.mdxiaojiou176-open/codeflow/CLAUDE.md
token-shaped literals; prefer generic workspace roots plus synthetic string assembly, keep placeholder security URIs pinned to the exact `example.com` contract, preserve `.jsonl` temp-report hints in portable scan scratch
VAMFICLAUDE.mdVAMFI/claude-user-memory/CLAUDE.md
problems, high-stakes decisions - **Time**: 2-4 minutes additional computation - **Best for**: Performance optimization, security-critical design **"ultrathink"** - Maximum reasoning (5-10 minutes): ```bash > Ultrathink the entire system architecture before
jgravelleCLAUDE.mdjgravelle/jdocmunch-mcp/CLAUDE.md
# jdocmunch-mcp **Version:** 1.145.0 | **Tests:** `PYTHONPATH=src python -m pytest tests/ -q` ⚠ **`python -m
AgentSecOpsCLAUDE.mdAgentSecOps/SecOpsAgentKit/CLAUDE.md
this repository. ## Repository Overview SecOpsAgentKit is a collection of Claude Code skills for security operations, DevSecOps, and secure SDLC practices. The repository follows a skill-based architecture where each security
DatabricksCLAUDE.mddatabricks/app-templates/mcp-server-hello-world/Claude.md
OAuth client ID by default - Implements PKCE (Proof Key for Code Exchange) for security - Opens browser for user authorization - Runs local HTTP server to capture OAuth callback - Exchanges authorization code
DatabricksCLAUDE.mddatabricks/app-templates/mcp-server-open-api-spec/CLAUDE.MD
www.databricks.com/product/databricks-apps) and uses [**Unity Catalog external connections**]((https://docs.databricks.com/aws/en/generative-ai/agent-framework/external-connection-tools)) for secure API authentication. ### Core Purpose - Parse OpenAPI 3.x specifications from Databricks Volumes - Expose three layered MCP tools
Idun-GroupCLAUDE.mdIdun-Group/idun-agent-platform/docs/CLAUDE.md
unbuilt features - Marketing language or unverified capability claims - Pricing information (lives on idun-group.com) - Security vulnerabilities or exploit details - API keys, secrets, or credentials (even example ones that look real) - Content
webdevtodayjasonCLAUDE.mdwebdevtodayjason/sub-agents/CLAUDE.md
test-runner` - **Documentation** → Always spawn: `doc-writer` + `api-documenter` - **Deployment** → Always spawn: `devops-engineer` + `security-scanner` ### Multi-Agent Patterns For complex tasks, spawn agent teams: **Full Stack Feature:** ```javascript Task
ahmedasmarCLAUDE.mdahmedasmar/devops-claude-skills/CLAUDE.md
including module development, state management, and troubleshooting - `skills/references/best_practices.md`: Project structure, state management, module design, security practices, CI/CD patterns - `skills/references/troubleshooting.md`: Common issues (state locks, drift, provider errors, resource issues, performance) - `skills/scripts/inspect_state.py
FradSerCLAUDE.mdFradSer/mcp-server-apple-events/CLAUDE.md
JSON │ ├── reminderRepository.ts # Repository pattern for reminders │ ├── calendarRepository.ts # Repository pattern for calendar events │ ├── binaryValidator.ts # Secure binary path validation │ ├── errorHandling.ts # Centralized async error wrapper (CliUserError / CliPermissionError) │ ├── helpers.ts # CLI argument builders (addOptionalArg, nullToUndefined
gollem-devCLAUDE.mdgollem-dev/gollem/CLAUDE.md
code - Run `golangci-lint run ./...` to check lint error - Run `gosec -quiet ./...` to check security issue - Run tests to ensure no impact on other code - All comment and character literal
ruvnetCLAUDE.mdruvnet/QuDAG/CLAUDE.md
management (Enterprise) - `./claude-flow deploy `: Deployment operations (Enterprise) - `./claude-flow cloud `: Cloud infrastructure management (Enterprise) - `./claude-flow security `: Security and compliance tools (Enterprise) - `./claude-flow analytics `: Analytics and insights (Enterprise) ### Project Initialization - `./claude-flow init
MCP-ManagerCLAUDE.mdMCP-Manager/MCP-Checklists/CLAUDE.md
Repository Purpose This repository helps users self-host STDIO MCP servers remotely using a secure, containerized approach. It provides infrastructure and tooling to deploy MCP servers accessible over HTTPS with
sbussoCLAUDE.mdsbusso/claudeclaw/CLAUDE.md
deps) => { ... }, dbSchema: ['CREATE TABLE IF NOT EXISTS ...'], containerEnvKeys: ['MY_KEY'], }); ``` Then import in `src/index.ts`. ## Security Rules **NEVER hardcode credentials, API keys, database URLs, hostnames, or project-specific identifiers
stephengpopeCLAUDE.mdstephengpope/shockwave/tests/CLAUDE.md
undoes it. `https` anywhere, `http` to **loopback** — the web platform's own set (W3C secure-contexts), so the exemption is a definition rather than a guess about what looks local
A file Claude Code reads at the start of every session. It holds the commands, conventions and warnings the agent needs for this project.
At the repository root. Claude Code also reads CLAUDE.md files in subdirectories when it works there.
Build and test commands, the project's layout, conventions that aren't obvious from the code, and mistakes to avoid. Short files tend to work better than long ones.
Claude Code reads CLAUDE.md; most other agents read AGENTS.md. Many projects keep one and point the other at it.
