CLAUDE.md examples from real projects

How real projects brief Claude Code: the commands, conventions and warnings they put in CLAUDE.md.

Best matches · from page 2Worked for most · soon

“security” OpenAI

topoteretesCLAUDE.md

cognee

topoteretes/cognee/CLAUDE.md

# CLAUDE.md This file provides guidance to Claude Code (claude.ai/code) when working with code

31k13d agoReads credentialsDiscuss

nanocoaiCLAUDE.md

install timezone. Resolution: `resolveGroupTimezone` in `src/container-config.ts` — group override → install global. ## Supply Chain Security (pnpm) This project uses pnpm with `minimumReleaseAge: 4320` (3 days) in `pnpm-workspace.yaml`. New package versions must exist

31k3d agoReads credentialsDiscuss

decoluaCLAUDE.md

9router

decolua/9router/CLAUDE.md

forwarding headers only from a loopback reverse proxy. Preserve this when touching request/IP/rate-limit code. - Security-sensitive env: `JWT_SECRET` (session cookie), `INITIAL_PASSWORD` (default `123456` — must override), `API_KEY_SECRET

30k9d agoReads credentialsDiscuss

JimLiuCLAUDE.md

baoyu-skills

JimLiu/baoyu-skills/CLAUDE.md

Gemini Web auth**: Browser cookies (first run opens Chrome for login, `--login` to refresh) ## Security - **No piped shell installs**: Never `curl | bash`. Use `brew install` or `npm install -g` - **Remote

26k5mo agoPipes a download into a shellDiscuss

DonchitosCLAUDE.md

Claude-Code-Game-Studios / CCGS Skill Testing Framework

Donchitos/Claude-Code-Game-Studios/CCGS Skill Testing Framework/CLAUDE.md

check, content-audit, code-review, tech-debt, scope-check, estimate, perf-profile, asset-audit, security-audit, test-evidence-review, test-flakiness team → team-combat, team-narrative, team-audio, team-level

25k8d agoDiscuss

alirezarezvaniCLAUDE.md

claude-skills

alirezarezvani/claude-skills/CLAUDE.md

role forcing questions. v2.7.3 ports `alirezarezvani/aeo-box` — AEO (Answer Engine Optimization) skill into marketing-skill/ + security-guidance PreToolUse hook into engineering/. v2.7.0 added 13 Path-B skills across 3 top-level

25k5mo agoReads credentialsDiscuss

alirezarezvaniCLAUDE.md

claude-skills / engineering-team

alirezarezvani/claude-skills/engineering-team/CLAUDE.md

frontend, senior-backend, senior-fullstack - senior-qa, senior-devops, senior-secops - code-reviewer, senior-security - aws-solution-architect, ms365-tenant-manager, google-workspace-cli, tdd-guide, tech-stack-evaluator, epic

25k5mo agoDiscuss

alirezarezvaniCLAUDE.md

claude-skills / project-management

alirezarezvani/claude-skills/project-management/CLAUDE.md

atlassian-admin/`) **Focus:** Suite administration, user management, integrations **Scripts:** - `scripts/permission_audit_tool.py` — Analyzes permission schemes for security gaps **Key Workflows:** - User provisioning and permissions - SSO/SAML configuration - App marketplace management - Performance monitoring ### Atlassian

25k5mo agoDiscuss

alirezarezvaniCLAUDE.md

claude-skills / ra-qm-team

alirezarezvani/claude-skills/ra-qm-team/CLAUDE.md

CAPA system management, root cause analysis - quality-documentation-manager - DHF, DMR, DHR management **Risk & Security (2 skills):** - risk-management-specialist - ISO 14971 compliance, risk analysis - information-security-manager-iso27001

25k5mo agoDiscuss

alirezarezvaniCLAUDE.md

claude-skills / standards

alirezarezvani/claude-skills/standards/CLAUDE.md

workflow, conventional commits, branching strategy 4. **documentation/** - Markdown quality, structure consistency, living docs 5. **security/** - Secret detection, dependency security, input validation ## When to Reference Standards ### Communication Standards **Reference when:** - Writing

25k5mo agoDiscuss

VoltAgentCLAUDE.md

awesome-claude-code-subagents

VoltAgent/awesome-claude-code-subagents/CLAUDE.md

specialists/ # Language/framework experts (TypeScript, Python, etc.) 03-infrastructure/ # DevOps, cloud, Kubernetes, etc. 04-quality-security/ # Testing, security auditing, code review 05-data-ai/ # ML, data engineering, AI specialists 06-developer

25k7mo agoDiscuss

activepiecesCLAUDE.md

activepieces

activepieces/activepieces/CLAUDE.md

auto-discover. - **HTTP**: `POST` for all create/update mutations. `DELETE` for deletes. Never PUT/PATCH. - **Security**: Every endpoint needs `securityAccess` config. - **Side effects**: Separated into `*-side-effects.ts` files, called explicitly after mutations. - **Multi

25k4mo agoDeletes or force-pushesDiscuss

microCLAUDE.md

go-micro

micro/go-micro/CLAUDE.md

Patterns for agent-friendly error responses - **Documentation Guides** - Six guides: AI-native services, MCP security, tool descriptions, agent patterns, error handling, troubleshooting - **WithMCP Option** - One-line MCP setup (`gateway/mcp/option.go`) - **Agent

23k3mo agoDiscuss

vxcontrolCLAUDE.md

pentagi

vxcontrol/pentagi/CLAUDE.md

letter, 1 number, and 1 special character from `!@#$&*`. ## Project Overview **PentAGI** is an automated security testing platform powered by AI agents. It runs autonomous penetration testing workflows using a multi

22k6mo agoReads credentialsDiscuss

getpaseoCLAUDE.md

paseo

getpaseo/paseo/CLAUDE.md

docs/docker.md](docs/docker.md) | Running the daemon and bundled web UI in Docker, volumes, agent images, security | | [docs/release.md](docs/release.md) | Release playbook, draft releases, completion checklist | | [docs/terminal-activity.md](docs/terminal-activity.md) | Terminal activity indicators — source-agnostic

19k53d agoDiscuss

emcie-coCLAUDE.md

parlant

emcie-co/parlant/CLAUDE.md

built for enterprise, large-scale use cases, where SLAs, stability and security are paramount The repo's structure follows the Hexagonal Architecture (Ports and Adapters) approach. - src/parlant - core: Core framework

18k21mo agoDiscuss

AgriciDanielCLAUDE.md

claude-seo

AgriciDaniel/claude-seo/CLAUDE.md

Image gen reference files (7 files) agents/ # 19 subagents (auto-discovered) seo-technical.md # Crawlability, indexability, security seo-content.md # E-E-A-T, readability, thin content seo-schema.md # Structured data validation seo-sitemap.md # Sitemap quality

18k4mo agoReads credentialsDiscuss

open-metadataCLAUDE.md

OpenMetadata

open-metadata/OpenMetadata/CLAUDE.md

local + prod deployment). ## Hard cross-cutting constraints (apply to every session, all languages) **Secrets & security.** Never commit secrets — use environment variables or a secrets manager. Auth is JWT with OAuth2/SAML

15k29d agoDiscuss

coleam00CLAUDE.md

context-engineering-intro / claude-code-full-guide

coleam00/context-engineering-intro/claude-code-full-guide/CLAUDE.md

data = json.loads(line) # Process and yield each item yield process_item(data) ``` ## 🛡️ Security Best Practices ### Security Guidelines - Never commit secrets - use environment variables - Validate all user input with Pydantic

14k15mo agoPipes a download into a shellDiscuss

nanobrowserCLAUDE.md

nanobrowser

nanobrowser/nanobrowser/CLAUDE.md

tests for business logic and utility functions - Test UI components in isolation when possible ### Security Guidelines - **Input Validation**: Always validate and sanitize user inputs, especially URLs, file paths, and form

14k18mo agoReads credentialsDiscuss

About CLAUDE.md

What is CLAUDE.md?

A file Claude Code reads at the start of every session. It holds the commands, conventions and warnings the agent needs for this project.

Where does it go?

At the repository root. Claude Code also reads CLAUDE.md files in subdirectories when it works there.

What should it contain?

Build and test commands, the project's layout, conventions that aren't obvious from the code, and mistakes to avoid. Short files tend to work better than long ones.

CLAUDE.md or AGENTS.md?

Claude Code reads CLAUDE.md; most other agents read AGENTS.md. Many projects keep one and point the other at it.