CLAUDE.md examples from real projects

atomicmemoryCLAUDE.md

llm-wiki-compiler

atomicmemory/llm-wiki-compiler/docs/CLAUDE.md

config, environment variables, providers, SDK/MCP surfaces, viewer behavior, export/import formats, files written under `.llmwiki/`, security boundaries, and changed failure behavior. - Prefer updating the closest existing page. Add a new page

StripeCLAUDE.md

stripe-cli

stripe/stripe-cli/CLAUDE.md

rather than `/tmp` — `bin/` is gitignored and within the project's trusted directory. macOS security may block execution of binaries built outside the project tree. ## Project Structure - `cmd/stripe/main.go` - Entry point

No other project uses it yet

SilentelyCLAUDE.md

eSIM-Tools / scripts

Silentely/eSIM-Tools/scripts/CLAUDE.md

脚本 | 命令 | 职责 | |------|------|------| | `quality-check.js` | `npm run quality-check` | 代码质量检查 (14 项) | | `security-check.js` | `npm run security-check` | 安全配置扫描 | ### 部署相关 | 脚本 | 命令 | 职责 | |------|------|------| | `deploy-prepare.js` | `npm run deploy-prepare` | 部署准备 (质量+安全+构建

SilentelyCLAUDE.md

eSIM-Tools / tests

Silentely/eSIM-Tools/tests/CLAUDE.md

Logger | 日志输出与脱敏 | | | `utils.test.js` | Utils | 工具函数 (debounce/throttle 等) | | | `html-sanitizer.test.js` | HTML Sanitizer | XSS 防护 (escapeHtml/escapeAttr) | | | `secure-storage.test.js` | Secure Storage | 加密 localStorage (TTL 过期) | | | `api-service.test.js` | API Service | HTTP 客户端 (重试/缓存/去重) | | **simyo/** | `help.test.js

LumiwealthReads credentialsCLAUDE.md

lumibot

Lumiwealth/lumibot/CLAUDE.md

behavior description ### Fixed - Bug fix description ### Deprecated - Feature being phased out ### Removed - Removed feature ### Security - Security-related changes ``` ### Pre-Deployment Checklist Before any deployment: - [ ] Reviewed git commits since last version

joshuayoesCLAUDE.md

ios-simulator-mcp

joshuayoes/ios-simulator-mcp/CLAUDE.md

xcrun simctl` and Facebook's `idb` commands - Validates all inputs with Zod schemas - Implements security best practices with `--` argument separation - Supports environment-based tool filtering via `IOS_SIMULATOR_MCP_FILTERED

yakhyoCLAUDE.md

uniface

yakhyo/uniface/CLAUDE.md

full suite before submitting changes. ## Pre-commit Pre-commit hooks handle formatting, linting, security checks, and notebook output stripping. Always run: ```bash pre-commit install pre-commit run --all-files

photon-hqCLAUDE.md

spectrum-ts

photon-hq/spectrum-ts/.claude/CLAUDE.md

Prefer simple conditionals over nested ternary operators - Group related code together and separate concerns ### Security - Add `rel="noopener"` when using `target="_blank"` on links - Avoid `dangerouslySetInnerHTML` unless absolutely necessary

AnthropicReads credentialsCLAUDE.md

anthropic-sdk-typescript

anthropics/anthropic-sdk-typescript/CLAUDE.md

cover a `null` check on an optional value, a value that decides a security or permission question, a tool runner parsing a model's tool input into the tool

opensearch-projectCLAUDE.md

OpenSearch-Dashboards

opensearch-project/OpenSearch-Dashboards/CLAUDE.md

with autofix node scripts/eslint --fix # Type check yarn typecheck # Run Cypress functional tests (no security plugin) yarn cypress:run-without-security # Run a specific Cypress test yarn cypress:run-without

ipxeCLAUDE.md

ipxe

ipxe/ipxe/CLAUDE.md

AGENTS.md`](AGENTS.md) — follow them. This file adds only the Claude Code-specific pieces. - **Security review:** for vulnerability-hunting work, invoke the **ipxe-security-review** skill (`.claude/skills/ipxe-security-review/`). It encodes the sweep

doobidooReads credentialsCLAUDE.md

mcp-memory-service

doobidoo/mcp-memory-service/CLAUDE.md

README. ## Development Guidelines ### Quality gates Three layers: pre-commit (under 5s, Groq/Gemini complexity plus security, blocks on complexity above 8 or a security finding), the PR gate `bash scripts/pr/pre_pr_check.sh

No other project uses it yet

WuKongOpenSourceCLAUDE.md

AI_CRM

WuKongOpenSource/AI_CRM/CLAUDE.md

enabled` 默认 `false`。同一用户重新登录会写 kickout 标记并删除旧令牌，旧令牌的后续请求随即失效；置 `true` 放开多端并发登录。 - **每请求生命周期**：校验令牌 → 写入 Spring Security 上下文与 `TenantContextHolder` → 在 `finally` 中**同时**清理 `TenantContextHolder` 与 `DataPermissionHolder`（线程池复用时防 ThreadLocal 泄漏）。无请求上下文的代码（注册

trycompaiCLAUDE.md

comp

trycompai/comp/CLAUDE.md

Monorepo Structure ``` apps/ api/ # NestJS API (auth, RBAC, business logic) app/ # Next.js frontend (compliance + security products) portal/ # Employee portal packages/ auth/ # RBAC definitions (permissions.ts) — single source of truth db/ # Prisma

No other project uses it yet

YosemiteCrewReads credentialsCLAUDE.md

Yosemite-Crew

YosemiteCrew/Yosemite-Crew/CLAUDE.md

never skip Identify and fix Sonar findings **locally before pushing** — never let issues or security hotspots first surface on the PR. - Before pushing ANY change, run the local Sonar workflow

ranutsDeletes or force-pushesCLAUDE.md

document

ranuts/document/CLAUDE.md

次骰子，而骰子是歪的：runner 首选的 `azure.archive.ubuntu.com` 返回 `Ign:`，退回公网 archive 后整个停摆（`noble-security InRelease` 之后零字节）。 本周四个 job 因此被 6 小时上限杀掉，加固之后又有两次各烧 17 分钟。 现在缓存命中直接 `exit 0`（连 apt 配置都不写）；`PLAYWRIGHT_INSTALL

ParabolIncReads credentialsCLAUDE.md

parabol

ParabolInc/parabol/.claude/CLAUDE.md

checks live in permissions.ts (graphql-shield), not inline in resolvers. Never trust client-supplied security facts (granted scopes, team ids) — derive them server-side. Every new GraphQL field needs explicit

No other project uses it yet

MicrosoftCLAUDE.md

PowerApps-Samples

microsoft/PowerApps-Samples/CLAUDE.md

ImageOperations**: Image column handling - **Schema**: Metadata operations, entity creation - **Search**: Dataverse search, elastic search - **Security**: Role management, sharing, field security - **ServiceClient**: Modern client usage patterns - **Solutions**: Solution management and deployment

beikeshopReads credentialsCLAUDE.md

beikeshop

beikeshop/beikeshop/CLAUDE.md

level `lang/` 4. **Cache**: Clear cache after config changes with `php artisan config:clear` ## Security - Never commit `.env` file - Change default admin password in production - Use HTTPS in production environment

leepokaiReads credentialsCLAUDE.md

Codync

leepokai/Codync/CLAUDE.md

after-change`, release PRs into `main` follow [GitHub releases](docs/guides/development.md#github-releases)): a security and prompt-injection check comes first, and nothing from the item runs before its whole diff

No other project uses it yet