CLAUDE.md examples from real projects

ArgeliusLabsCLAUDE.md

Chasing-Your-Tail-NG

ArgeliusLabs/Chasing-Your-Tail-NG/CLAUDE.md

WiGLE integration - **start_kismet_clean.sh**: ONLY working Kismet startup script (all others moved to old_scripts/) - **Security modules**: `secure_*.py` files providing SQL injection prevention and encrypted credentials ### Data Flow 1. Kismet

hapifhirCLAUDE.md

hapi-fhir

hapifhir/hapi-fhir/CLAUDE.md

permitted to change any code under src/main folders pertaining to the security of the application. This includes any class that contains the word Security, Permission, Oidc, Authorization, Authority, Authentication, KeyStore

langhuihuiCLAUDE.md

monibuca

langhuihui/monibuca/CLAUDE.md

standard - **FLV:** Flash video format - **MP4:** MPEG-4 format with post-processing capabilities - **SRT:** Secure reliable transport - **S3:** File upload integration with AWS S3/MinIO compatibility ## Authentication & Security - JWT-based authentication

hzqstCLAUDE.md

VmwareHardenedLoader

hzqst/VmwareHardenedLoader/.claude/CLAUDE.md

navigation points needed for discovery: - Project purpose, source map, driver lifecycle, and dynamic-data security model: `core`. - Toolchain, System Informer dependency, and generated outputs: `tech_stack`. - Build and runtime commands

FasterXMLCLAUDE.md

jackson-core

FasterXML/jackson-core/CLAUDE.md

configuration flows through `TSFBuilder` / `JsonFactoryBuilder`. There is no mutable-setter fallback. ### Processing limits (security-relevant) Three per-factory config objects, with quite different scopes — don't conflate them: - **`StreamReadConstraints`** does

No other project uses it yet

zakirkunCLAUDE.md

deep-eye

zakirkun/deep-eye/CLAUDE.md

builders | | `.agents/skills/` | Agent skills: pentest, bug-bounty, red-team, blue-team, ctf, security-ops | ### Agent skills When the user asks for pentest / bug bounty / red team / blue team / CTF work

stacklokCLAUDE.md

toolhive

stacklok/toolhive/CLAUDE.md

Claude Code when working with this repository. ## Project Overview ToolHive is a lightweight, secure manager for MCP (Model Context Protocol: https://modelcontextprotocol.io) servers written in Go. It provides

No other project uses it yet

josephburnettCLAUDE.md

jd

josephburnett/jd/CLAUDE.md

/lib` - Deprecated v1 library (read-only) - `main.go` - Deprecated v1 commandline (read-only) ## Supply Chain Security - Dependencies MUST be minimal. Do not add new dependencies without justification. - GitHub Actions MUST

No other project uses it yet

levy-streetCLAUDE.md

world-of-claudecraft

levy-street/world-of-claudecraft/docs/CLAUDE.md

iOS/Android). Living. | | `sfx-studio-tutorial.md`, `codex.md` | Operator guides: the SFX Studio; the Codex support layer. Living. | | `security/` | `malware-scan-catalog.md`: the path-aware triage priors behind `scripts/malware_scan.mjs --gate`. `dependency-audit-catalog.md`: the `pnpm audit` gate model

No other project uses it yet

levy-streetReads credentialsCLAUDE.md

world-of-claudecraft / scripts

levy-street/world-of-claudecraft/scripts/CLAUDE.md

browser resolver for the asset pipeline) | server + economy service (+ dev for visual) / none (thumbs) | | Security | `ws_security_e2e.mjs` (server), `malware_scan.mjs` (release-gate malicious-code flagger over the whole tree): `security:scan` exits

No other project uses it yet

levy-streetCLAUDE.md

world-of-claudecraft / tests

levy-street/world-of-claudecraft/tests/CLAUDE.md

means touching this file. - SFX gates: the `sfx_*` suites (`sfx_conform`, `sfx_studio_server_security`, `tests/server/static_sfx_serving`, ...) mirror `npm run sfx:check`. - `malware_scan.test.ts` is the release-gate backstop (signatures from `scripts/malware_scan.mjs

No other project uses it yet

mampfesCLAUDE.md

hacs_waste_collection_schedule

mampfes/hacs_waste_collection_schedule/CLAUDE.md

contributor's branch and approve. Hardcoded data, missing API integration, security issues → request changes. - **Never commit directly to `master`** — local, origin, or upstream. Every change goes through a feature branch

No other project uses it yet

eneskircaReads credentialsCLAUDE.md

nodeterm

eneskirca/nodeterm/CLAUDE.md

main, so its `[webgl]` lines stay in the browser console. ### Server Edition sign-in (security audit 2026-10) The browser edition is reachable by anyone who can reach its login

agno-agiReads credentialsCLAUDE.md

dash

agno-agi/dash/CLAUDE.md

Correct data and meaningful insights | | routing | ReliabilityEval | Team routes to correct agent/tools | | security | AgentAsJudgeEval (binary) | No credential or secret leaks | | governance | AgentAsJudgeEval (binary) | Refuses destructive SQL operations | | boundaries | AgentAsJudgeEval (binary

salesforceCLAUDE.md

cloudsplaining

salesforce/cloudsplaining/CLAUDE.md

working with code in this repository. ## What This Is Cloudsplaining is an AWS IAM security assessment tool. It parses the output of `aws iam get-account-authorization-details`, identifies

No other project uses it yet

postalsysReads credentialsCLAUDE.md

emailengine

postalsys/emailengine/CLAUDE.md

build-document.js` walks `server.table()`, `index.js` registers the route. Document-level options (tag list and order, security scheme) live in `lib/swagger-options.js`; per-route documentation metadata lives in each route's `plugins.openapi` block

atomicmemoryCLAUDE.md

llm-wiki-compiler

atomicmemory/llm-wiki-compiler/docs/CLAUDE.md

config, environment variables, providers, SDK/MCP surfaces, viewer behavior, export/import formats, files written under `.llmwiki/`, security boundaries, and changed failure behavior. - Prefer updating the closest existing page. Add a new page

SilentelyCLAUDE.md

eSIM-Tools / scripts

Silentely/eSIM-Tools/scripts/CLAUDE.md

脚本 | 命令 | 职责 | |------|------|------| | `quality-check.js` | `npm run quality-check` | 代码质量检查 (14 项) | | `security-check.js` | `npm run security-check` | 安全配置扫描 | ### 部署相关 | 脚本 | 命令 | 职责 | |------|------|------| | `deploy-prepare.js` | `npm run deploy-prepare` | 部署准备 (质量+安全+构建

SilentelyCLAUDE.md

eSIM-Tools / tests

Silentely/eSIM-Tools/tests/CLAUDE.md

Logger | 日志输出与脱敏 | | | `utils.test.js` | Utils | 工具函数 (debounce/throttle 等) | | | `html-sanitizer.test.js` | HTML Sanitizer | XSS 防护 (escapeHtml/escapeAttr) | | | `secure-storage.test.js` | Secure Storage | 加密 localStorage (TTL 过期) | | | `api-service.test.js` | API Service | HTTP 客户端 (重试/缓存/去重) | | **simyo/** | `help.test.js

0-AI-UGCLAUDE.md

cate

0-AI-UG/cate/CLAUDE.md

kernel/`: rpc, api, settings, lifecycle, state, log, interaction (generic machinery) - `runtime/`: daemon, data, transports, security, pairing, connect, tunnel, power, push - `workspace/`: document, lifecycle (trust), canvas, files, repository, skills, relations, notifications

No other project uses it yet