How real projects brief Claude Code: the commands, conventions and warnings they put in CLAUDE.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
zenml-ioCLAUDE.mdzenml-io/zenml/CLAUDE.md
reuse opportunities, quality issues, and efficiency improvements. Fix any issues it finds before committing. ### Security Guidelines - **NEVER** commit secrets, API keys, tokens, or passwords - Use environment variables or ZenML
zenml-ioReads credentialsCLAUDE.mdzenml-io/zenml/.github/CLAUDE.md
linting.yml, spellcheck.yml, zizmor.yml, check-links.yml, check-markdown-links.yml, gitbook-redirect-check.yml, validate-changelog.yml | Code quality, docs links, changelog, and workflow security checks | | **Release/Nightly** | release.yml, release_prepare.yml, release_finalize.yml, publish_*.yml, nightly_build.yml | PyPI, Docker, Helm, stack template, and nightly
simbasjunglesReads credentialsCLAUDE.mdsimbasjungles/free-my-tv/CLAUDE.md
kill-server; adb nodaemon server &`), or allow the terminal app under System Settings → Privacy & Security → Local Network. 7. **Tell them what the switch does** before they make it: the home
GitHubReads credentialsCLAUDE.mdgithub/gh-aw/docs/src/content/docs/reference/engines/claude.md
Claude Code engine configuration, supported tools, runtime behavior, and limitations.
useplunkReads credentialsCLAUDE.mduseplunk/plunk/CLAUDE.md
Database: `DATABASE_URL`, `DIRECT_DATABASE_URL` (for Prisma client generation) - Standard: `NODE_ENV` **Runtime:** - Security: `JWT_SECRET` - Database: `DATABASE_URL`, `DIRECT_DATABASE_URL` - Infrastructure: `REDIS_URL` - **Application URLs** (injected
awarexoneCLAUDE.mdawarexone/Agentic-Bug-Hunter/CLAUDE.md
none/confusion/crack), OOB blind-bug confirmation (interactsh), LLM red-team corpus | | `skills/mcp-server-audit/` | MCP server security — tool poisoning, param→sink injection (path/cmd/SSRF/SQL), missing approval gates, result-channel secret leaks, rug-pull/confused-deputy
aaddrickDeletes or force-pushesCLAUDE.mdaaddrick/claude-desktop-debian/CLAUDE.md
Changelog 1.1.0](https://keepachangelog.com/en/1.1.0/).** Bullets grouped under Added / Fixed / Changed / Deprecated / Removed / Security; one bullet per change; PR link for the deep dive; inline **BREAKING** prefix for breaking changes
0xebCLAUDE.md0xeb/TheBigPromptLibrary/.claude/CLAUDE.md
content is primarily markdown documentation for educational purposes around prompt engineering and LLM security research. ## Repository Structure - **SystemPrompts/** - System prompts from various LLM providers (OpenAI, Anthropic, Google, Meta
SaladDayReads credentialsCLAUDE.mdSaladDay/cc-switch-cli/CLAUDE.md
rounds. Ask the reviewer to independently inspect all current modifications and report correctness, regression, security, performance, UX, and test-coverage issues. - Validate every finding against the code. Make minimal fixes
No other project uses it yet
trustwalletCLAUDE.mdtrustwallet/assets/CLAUDE.md
architecture, build, conventions, core-libs, decisions, design, features, git-conventions, guides, observability, product, quality, security, tests, workflows, brand, business, legal, hr, prompts, api, libs, components, references ## Constraints - [TODO: Add project
breaking-brakeCLAUDE.mdbreaking-brake/cc-wf-studio/CLAUDE.md
effect refactors) is out of scope for agents. Maintenance is interrupt-only: red CI, security, human-reported bugs. - Two skills drive it: `next-idea` (ideation — files locked `idea` issues, never
No other project uses it yet
shuvonsecCLAUDE.mdshuvonsec/claude-bug-bounty/CLAUDE.md
none/confusion/crack), OOB blind-bug confirmation (interactsh), LLM red-team corpus | | `skills/mcp-server-audit/` | MCP server security — tool poisoning, param→sink injection (path/cmd/SSRF/SQL), missing approval gates, result-channel secret leaks, rug-pull/confused-deputy
spiegltCLAUDE.mdspieglt/FlyingCarpet/CLAUDE.md
never reuse, never user-chosen, never "remember." The entire "offline crack is worthless" security argument depends on this (see the crypto doc §7). The discovery HMAC key is derived from
kasmtechDeletes or force-pushesCLAUDE.mdkasmtech/KasmVNC/CLAUDE.md
ancestor, but KasmVNC deliberately breaks RFB to support modern transport, encodings, and security. **Do not "fix" code toward RFB-spec compliance** — divergence is intended. (A detailed list of the deviations
entireioCLAUDE.mdentireio/cli/CLAUDE.md
docs/architecture/agent-guide.md), [integration checklist](docs/architecture/agent-integration-checklist.md) | | External commands or agents | [External commands](docs/architecture/external-commands.md), [agent protocol](docs/architecture/external-agent-protocol.md) | | Security, privacy, scanners | [Security and privacy](docs/security-and-privacy.md), [implementation contracts](docs/development/checkpoint-implementation.md) | | Review command | [Review architecture](docs/architecture/review-command.md) | | Release
Steady7 mentions in 2 weeks
No other project uses it yet
umbracoCLAUDE.mdumbraco/Umbraco-CMS/CLAUDE.md
APIs use **OpenIddict** (OAuth 2.0/OpenID Connect): - Reference tokens (not JWT) for better security - **Secure cookie-based token storage** (v17+) - tokens stored in HTTP-only cookies with `__Host-` prefix - Tokens
hieunc229Reads credentialsCLAUDE.mdhieunc229/mailflare/CLAUDE.md
RATE_LIMIT`) since it skips Turnstile. Device keys are listed and revoked under Settings → Security (`/api/devices`), hidden from the API keys list, and `deleteUserSessions` revokes them all (password change, reset
No other project uses it yet
nibzardCLAUDE.mdnibzard/awesome-agentic-patterns/CLAUDE.md
Original Creator (Source)"] category: "Orchestration & Control | Context & Memory | Feedback Loops | Learning & Adaptation | Reliability & Eval | Security & Safety | Tool Use & Environment | UX & Collaboration | Uncategorized" source: "URL to primary source" tags: [relevant, keywords
melgarafaelReads credentialsCLAUDE.mdmelgarafael/DeskcommCRM/CLAUDE.md
Extensions: `uuid-ossp`, `pgcrypto`, `vector` - **Auth:** Supabase Auth via `@supabase/ssr`. Cookie SameSite=Strict, HttpOnly, Secure - **Realtime:** Supabase Realtime (postgres_changes + broadcast) - **Storage:** Supabase Storage (bucket `whatsapp-media` privado, URLs assinadas
PerryTSCLAUDE.mdPerryTS/perry/CLAUDE.md
cargo-test`, the 6-shard fast-mode gap suite, `gc-stress`, `e2e-scoped`, and `security-audit` when a lockfile/manifest changed). What runs in which tier is decided by `scripts/ci_plan.py` (`--table
No other project uses it yet
A file Claude Code reads at the start of every session. It holds the commands, conventions and warnings the agent needs for this project.
At the repository root. Claude Code also reads CLAUDE.md files in subdirectories when it works there.
Build and test commands, the project's layout, conventions that aren't obvious from the code, and mistakes to avoid. Short files tend to work better than long ones.
Claude Code reads CLAUDE.md; most other agents read AGENTS.md. Many projects keep one and point the other at it.
