CLAUDE.md examples from real projects

m0n0x41dCLAUDE.md

quint-code

m0n0x41d/quint-code/CLAUDE.md

execution authority; approve, reopen, or rebaseline a SpecSection; make a material product/value/scope, public-promise, security, legal, privacy, finance, irreversible-data, compatibility, or authority-allocation choice. - If current Work would rely

peterkrueckCLAUDE.md

Claude-Code-Development-Kit / templates

peterkrueck/Claude-Code-Development-Kit/templates/CLAUDE.md

keep docs in sync with the code. ## 6. Coding Standards ## 7. Testing ## 8. Privacy & Security

apacheCLAUDE.md

struts

apache/struts/CLAUDE.md

core -Dtest=MyClassTest#testMethodName # Jakarta EE 11 / Spring 7 profile mvn clean install -Pjakartaee11 ``` ## Security-Critical Patterns Apache Struts has a history of security vulnerabilities (OGNL injection, temp file exploits

ruzinCLAUDE.md

stenoai

ruzin/stenoai/CLAUDE.md

review of the full branch diff (`git diff main...HEAD`): - Review backend code for security issues, error handling gaps, edge cases, and best practices - Review frontend code for layout bugs

utkusenCLAUDE.md

sast-skills / sast-files

utkusen/sast-skills/sast-files/CLAUDE.md

SAST Security Assessment Your goal is to identify security vulnerabilities in the codebase located in the current directory. --- ## Step 1: Codebase Analysis & Threat Modeling Before running, check if `sast/architecture.md` already

freelabzCLAUDE.md

secator

freelabz/secator/CLAUDE.md

when working with code in this repository. ## Project Overview Secator is a Python-based security assessment automation framework ("the pentester's swiss knife") that integrates 40+ security tools into

MicrosoftCLAUDE.md

skills-for-fabric

microsoft/skills-for-fabric/CLAUDE.md

Extended Events) ### Database Hub - **Database estate**: Read-only cross-engine inventory, health, findings, and security posture for Microsoft SQL, PostgreSQL, and Cosmos DB; Fabric SQL is inventory-only - Docs

No other project uses it yet

kunkunshCLAUDE.md

kunkun

kunkunsh/kunkun/CLAUDE.md

plugin-system-info`: System information - `tauri-plugin-user-input`: Input handling - `tauri-plugin-keyring`: Secure credential storage - gRPC communication for some internal services - Cross-platform support with platform-specific dependencies

dohoooCLAUDE.md

helmor

dohooo/helmor/CLAUDE.md

Bump cadence: every release cycle if upstream has shipped a notable fix; immediately on security advisories. Pin so the auth-status JSON shape Helmor parses doesn't drift unexpectedly. - **Bundled

pashovCLAUDE.md

skills

pashov/skills/CLAUDE.md

self-contained capability for Claude Code in VS Code and Cursor. ## Structure ``` solidity-auditor/ # Security review of Solidity changes while you develop CLAUDE.md # This file (read by Claude Code) ``` ## Rules

wundergraphCLAUDE.md

cosmo / router-tests

wundergraph/cosmo/router-tests/CLAUDE.md

matrix or config changes needed. | Directory | Purpose | |-----------|---------| | `observability/` | Prometheus metrics, logging, metrics exporters | | `security/` | Auth, TLS, mTLS, error handling, circuit breakers, rate limiting | | `operations/` | Caching, persisted ops, normalization, query plans

No other project uses it yet

bugzmanovCLAUDE.md

bookokrat

bugzmanov/bookokrat/CLAUDE.md

# CLAUDE.md This file provides guidance to Claude Code (claude.ai/code) when working with code

selfxyzCLAUDE.md

self

selfxyz/self/CLAUDE.md

lifecycle, keychain, and crypto signing/key-gen only. - **Keychain is native-managed.** No web fallback for secure storage. - **Keep the browser entry RN-free.** `mobile-sdk-alpha` is dual-target, not platform

Taewan-PCLAUDE.md

gpt_mobile

Taewan-P/gpt_mobile/CLAUDE.md

/gradlew connectedAndroidTest # Instrumented tests ``` ### Code Quality - **Linting**: Handled by GitHub Actions with ktlint 1.3.1 - **Security**: CodeQL analysis runs automatically on main branch changes ## Architecture ### Core Structure - **MVVM Pattern**: ViewModels handle

No other project uses it yet

ArcadeDataCLAUDE.md

arcadedb

ArcadeData/arcadedb/CLAUDE.md

finished. Please do not provide something untested - always keep in mind speed and security with ArcadeDB, do not introduce security hazard or code that could slow down other parts unless

ArcadeDataCLAUDE.md

arcadedb / ha-raft

ArcadeData/arcadedb/ha-raft/CLAUDE.md

fail. The ones that cannot be quarantined are **held** (`heldEntryFloors`, `holdEntryForReplay`): a security document or a database configuration already in force in memory whose file could not be written

distr-shCLAUDE.md

distr

distr-sh/distr/CLAUDE.md

# CLAUDE.md Guidance for Claude Code (claude.ai/code) and other agents working in this repository

LogExpertsCLAUDE.md

LogExpert

LogExperts/LogExpert/.github/CLAUDE.md

Localization resources ├── LogExpert.Configuration/# Configuration management ├── ColumnizerLib/ # Plugin interface definitions ├── PluginRegistry/ # Plugin discovery and security └── Columnizers/ # Built-in columnizer plugins (CSV, JSON, Regex, etc.) ``` ### Key Architectural Components #### 1. Single Instance

nightscoutCLAUDE.md

AndroidAPS

nightscout/AndroidAPS/CLAUDE.md

agents too) - **NEVER use `cd && command` or `cd; command` in Bash calls** — triggers security approval prompts on Windows. Use absolute paths or `git -C` instead: - ✅ `git -C E:/GitHub/AndroidAPS diff

No other project uses it yet

jewbetchaCLAUDE.md

openflight

jewbetcha/openflight/CLAUDE.md

concerns. - Data flow patterns and potential bottlenecks. - Scaling characteristics and single points of failure. - Security architecture (auth, data access, API boundaries). ## 2. Code quality review Evaluate: - Code organization and module