CLAUDE.md examples from real projects

openagenCLAUDE.md

zeroclaw

openagen/zeroclaw/CLAUDE.md

Rust-first autonomous agent runtime optimized for performance, efficiency, stability, extensibility, sustainability, and security. Core architecture is trait-driven and modular. Extend by implementing traits and registering in factory modules

trailofbitsCLAUDE.md

publications

trailofbits/publications/CLAUDE.md

Papers 3. Guides and Handbooks 4. Conference Presentations 5. Podcasts 6. Public Comments 7. Security Reviews 8. Disclosures 9. Workshops 10. Datasets 11. Service Overviews - Within each section, entries should

No other project uses it yet

DyneteqReads credentialsCLAUDE.md

reconya

Dyneteq/reconya/CLAUDE.md

every third-party lookup is an explicit opt-in flag **Target Users:** Network administrators, security professionals, home users monitoring their own LAN. --- ## Technology Stack **Backend:** - Go 1.25, `net/http` + `gorilla/mux` - SQLite

LyraVoidReads credentialsCLAUDE.md

Mizuki

LyraVoid/Mizuki/CLAUDE.md

plain language instead (e.g., "verify: running curl /api/users returns 200 with expected JSON"). ### 5. Security Baseline **Never commit keys or sensitive credentials to the repository.** - All API keys, tokens, passwords

zakirkunReads credentialsCLAUDE.md

guardian-cli

zakirkun/guardian-cli/CLAUDE.md

ReporterAgent) over a pluggable AI provider layer (OpenAI, Claude, Gemini, OpenRouter) and 19 external security tool wrappers, executed via YAML-defined workflows. Designed exclusively for authorized testing. ## Common Commands Windows

meganzCLAUDE.md

android / data

meganz/android/data/CLAUDE.md

Repository` implementations of `:domain` interfaces (also organized into feature subpackages: `chat/`, `account/`, `photos/`, `files/`, `security/`, etc.). - `gateway/` — interfaces abstracting SDK and platform access (e.g. `gateway/api/MegaApiGateway`, `MegaChatApiGateway`, `MegaApiFolderGateway`, `StreamingGateway`, plus `FileGateway

CactiCLAUDE.md

cacti

Cacti/cacti/CLAUDE.md

adds test organization, path-depth and dependency rules. Keep shared guidance free of private security-research notes. Use `mise` for the PHP/Node versions declared by Composer, `.nvmrc

No other project uses it yet

Datus-aiCLAUDE.md

Datus-agent

Datus-ai/Datus-agent/CLAUDE.md

cases: deprecated public APIs/config fields (e.g. a removed YAML key must be silently ignored), security fixes (e.g. secrets must not appear in logs), and removed side effects with real regression

No other project uses it yet

mercurjsCLAUDE.md

mercur

mercurjs/mercur/CLAUDE.md

Medusa", load `.claude/skills/mercur-review/SKILL.md`. It runs independent reviewer agents (Medusa patterns, dashboard patterns, technical QA, security, taste) against `references/`, triages findings into actionable / nit / ambiguous, fixes the actionable ones, verifies them

nilsteampassnetDeletes or force-pushesCLAUDE.md

TeamPass

nilsteampassnet/TeamPass/CLAUDE.md

Overview TeamPass is a collaborative on-premise password manager built in PHP. It emphasizes security through multi-layer encryption, comprehensive audit logging, and granular role-based access control. **Tech Stack

No other project uses it yet

LUC4N3XCLAUDE.md

Levyra-deepsound / claude

LUC4N3X/Levyra-deepsound/.agents/claude/CLAUDE.md

levyra-compose`, `levyra-design-taste`, `levyra-android-performance`, `levyra-r8-proguard`, `levyra-android-intent-security`, `levyra-ci-workflows`, `levyra-context-efficiency`, `levyra-pr-review`, `levyra-release-check`. The shared router

NikolaySCLAUDE.md

pgque

NikolayS/pgque/CLAUDE.md

Architecture Two-layer design: - **pgque-core:** Productization of PgQ (rename, PG14+ modernization, pg_cron, security hardening, single-file install). Mechanical transformation of ~4,028 lines of proven PL/pgSQL. - **pgque

stephengpopeReads credentialsCLAUDE.md

thepopebot

stephengpope/thepopebot/CLAUDE.md

changes - **ALWAYS** make schema changes by editing `lib/db/schema.js` then running `npm run db:generate` ## Security: Route Architecture **`/api` routes are for external callers only.** They authenticate

AnthropicCLAUDE.md

claude-agent-sdk-typescript

anthropics/claude-agent-sdk-typescript/CLAUDE.md

CLAUDE.md Guidance for Claude Code and other coding agents working in this repository. ## Security hardening for GitHub Actions Workflow jobs in this repository that call Claude run with three protections

No other project uses it yet

OpenAdaptAICLAUDE.md

OpenAdapt

OpenAdaptAI/OpenAdapt/CLAUDE.md

monolith - `docs/`: noncanonical historical repository documentation; docs.openadapt.ai is maintained in `OpenAdaptAI/openadapt-ops` - `.github/`: CI, security, dependency, and release workflows ## Development and delivery ```bash python -m pip install -e '.[dev]' pytest ruff

No other project uses it yet

j3ssieReads credentialsCLAUDE.md

metabigor

j3ssie/metabigor/CLAUDE.md

using local DB - **Don't ignore cleanup**: Close HTTP clients, Chrome instances, file handles ### Security Considerations - **No credentials in code**: This tool specifically avoids API keys - **Input validation**: Sanitize user

higgsfield-aiReads credentialsCLAUDE.md

skills

higgsfield-ai/skills/CLAUDE.md

marketplace-cards/ │ └── SKILL.md ├── higgsfield-websites/ │ ├── SKILL.md │ └── references/ # stack, wow-maker, auth, fnf-sdk, seo-*, security-* ├── higgsfield-faceless-video/ │ ├── SKILL.md │ ├── scripts/ │ └── references/ ├── higgsfield-video-explainer/ │ ├── SKILL.md │ └── SKILL.md ├── evals/ # dev-only test

mozilla-servicesReads credentialsCLAUDE.md

syncstorage-rs

mozilla-services/syncstorage-rs/CLAUDE.md

contains a Rust multi-crate server plus Python utilities and integration/end-to-end tests. ## Agent rules Security takes absolute precedence. This repository handles synchronization of user data and token management to access

jhd3197Reads credentialsCLAUDE.md

ServerKit

jhd3197/ServerKit/CLAUDE.md

ServerKit is a server control panel for managing web applications, databases, Docker containers, and security on VPS/dedicated servers. Flask backend (Python 3.11+), React frontend (Vite + SCSS), SQLite/PostgreSQL database, real-time

Jedward23Deletes or force-pushesCLAUDE.md

Tmux-Orchestrator

Jedward23/Tmux-Orchestrator/CLAUDE.md

Engineer**: Testing and verification 4. **DevOps**: Infrastructure and deployment 5. **Code Reviewer**: Security and best practices 6. **Researcher**: Technology evaluation 7. **Documentation Writer**: Technical documentation ## 🔐 Git Discipline - MANDATORY