CLAUDE.md examples from real projects

How real projects brief Claude Code: the commands, conventions and warnings they put in CLAUDE.md.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Best matches · from page 21Worked for most · soon

“security” Hiding risky files

tuanngocptnCLAUDE.md

nport

tuanngocptn/nport/CLAUDE.md

project overview). ## Project Overview NPort is a free, open-source ngrok alternative that creates secure HTTP/HTTPS tunnels from localhost to public URLs using Cloudflare's global edge network

7698mo agoReviewMount

alirezarezvaniCLAUDE.md

claude-code-tresor

alirezarezvani/claude-code-tresor/CLAUDE.md

intelligent orchestration (NEW v2.7!) - 4 Development commands - 5 Tresor Workflow commands - 10 Orchestration commands (Security, Performance, Operations, Quality) - **20+ Prompt Templates**: Production-ready prompts for common development scenarios - **Development Standards

76812mo agoReviewMount

EndstoneMCCLAUDE.md

endstone

EndstoneMC/endstone/CLAUDE.md

entry; latest version comes first. - Group changes by type: Added, Changed, Deprecated, Removed, Fixed, Security. - Versions and sections must be linkable (reference-style links at bottom). - Display the release date

76634d agoReviewMount

zulipCLAUDE.md

docker-zulip

zulip/docker-zulip/.claude/CLAUDE.md

space indent per `.editorconfig`. - **Markdown**: Formatted by **prettier**, spell-checked by **typos**. - GitHub Actions security: **zizmor**. ## Repository Structure ``` Dockerfile # Multi-stage Docker image build entrypoint.sh # Runtime entrypoint (~750 lines

7666mo agoReviewMount

homelab-00CLAUDE.md

TranscriptionSuite

homelab-00/TranscriptionSuite/CLAUDE.md

symbol — callers, callees, which execution flows it participates in — use `context({name: "symbolName"})`. - For security review, `explain({target: "fileOrSymbol"})` lists taint findings (source→sink flows; needs `analyze --pdg`). ## Never

7633mo agoReviewMount

Harry-kpCLAUDE.md

vortix

Harry-kp/vortix/CLAUDE.md

headless. - **One fixed experience.** Every VPN gets the same sidebar, keys, panels, Security Guard, kill switch, CLI and JSON. A product adds at most one thing behind

75748d agoReviewMount

apacheCLAUDE.md

streampipes

apache/streampipes/CLAUDE.md

migration, an endpoint, an extension) and module-specific rules live there, not here. ## Skills - `security-triage` — use when the task is to assess, reproduce or report a suspected vulnerability

7562mo agoReviewMount

alexandremendoncaalvaroCLAUDE.md

CorridorKey-Runtime

alexandremendoncaalvaro/CorridorKey-Runtime/CLAUDE.md

principles, code standards, complexity, API, performance, build, static analysis, quality gates, testing, git, documentation, security. Pre-suggested defaults from canon + scan-first detection. | | `ad-spec` | `/ad-spec` | Draft a feature spec

7553mo agoReviewMount

rapidaaiCLAUDE.md

voice-ai / bin

rapidaai/voice-ai/bin/CLAUDE.md

with least privilege and pinned dependencies. - Keep commands deterministic, fail closed for release or security decisions, and avoid hidden network access. - Never add a bypass for required checks. Test both

75540d agoReviewMount

jy02739244CLAUDE.md

iori-nav

jy02739244/iori-nav/CLAUDE.md

不要塞 ` ` / ` `** ### 4. 认证 / CSRF / 防爆破（全在 `_middleware.js`） - 登录走 form POST，成功后写 `admin_session= ; HttpOnly; Secure; SameSite=Lax`，对应 KV `session_${token}`；TTL 用户可选 1/7/30/60/90 天 - CSRF：登录同时生成 `csrf_${token

74511mo agoReviewMount

ruvnetCLAUDE.md

metaharness / kimi-k3-harness

ruvnet/metaharness/kimi-k3-harness/CLAUDE.md

wiring, memory backend, host adapter. - `review-diff` — Review the current working diff for correctness, security, and reuse. ## Architecture This harness uses [@metaharness/kernel](https://www.npmjs.com/package/@metaharness/kernel) — a Rust-compiled WASM module

7409d agoReviewMount

chenran818CLAUDE.md

CFP-Study

chenran818/CFP-Study/CLAUDE.md

Retirement Savings and Income Planning (18%)** - HIGHEST WEIGHTED - F.44 Retirement needs analysis - F.45 Social Security and Medicare planning - F.46 Eldercare and special needs planning - F.47 Types of retirement plans - F.48

73911mo agoReviewMount

rekog-labsCLAUDE.md

MCP-Nest

rekog-labs/MCP-Nest/CLAUDE.md

root `bun.lock`. - Releases: create a GitHub release `vX.Y.Z` → `publish.yml`. Security patches release themselves (`auto-release.yml`, Dependabot auto-merge, rollback on a failed smoke test); see `SECURITY-AUTOMATION-PLAN.md` before touching `.github/workflows/`. ## Directives

7322mo agoReviewMount

bitwardenCLAUDE.md

ios

bitwarden/ios/.claude/CLAUDE.md

BitwardenShared/Core/Platform/Services/Stores/Bitwarden.xcdatamodeld`. Models follow the pattern: `Domain/`, `Enum/`, `Request/`, `Response/` subdirectories within each domain. ## Security & Configuration ### Security Rules **MANDATORY — These rules have no exceptions:** 1. **Zero-Knowledge Preservation**: Never log, persist

7317mo agoReviewMount

GriefedCLAUDE.md

ServerPackCreator / serverpackcreator-api

Griefed/ServerPackCreator/serverpackcreator-api/CLAUDE.md

manifests. - **LANDMINE — `-Djava.security.manager=allow` is fatal from Java 24 on.** JEP 486 removed Security Manager support, so the VM *refuses to start* rather than ignoring the flag. `PackConfig.spcSSJArgsKeyDefaultValue` still defaults

73127d agoReviewMount

RushB-frCLAUDE.md

freekiosk

RushB-fr/freekiosk/CLAUDE.md

still gets it, and ADB is the only way to grant the `WRITE_SECURE_SETTINGS` it needs to turn on anyway. The two flags are mutually exclusive and the build

72213mo agoReviewMount

DanitilahunCLAUDE.md

n8n-workflow-templates

Danitilahun/n8n-workflow-templates/CLAUDE.md

Update connections when adding/removing nodes 4. Test compatibility with n8n version requirements ## Key Considerations ### Security - Workflow files may contain sensitive information in webhook URLs or API configurations - Credentials are typically

72116mo agoReviewMount

avihaymenahemCLAUDE.md

velo

avihaymenahem/velo/CLAUDE.md

Format is `imap-{accountId}-{folder}-{uid}` — not the RFC Message-ID header - **IMAP security mapping**: UI shows "SSL/TLS", "STARTTLS", "None" but config stores "ssl", "starttls", "none" - **IMAP UIDVALIDITY**: If UIDVALIDITY

7159mo agoReviewMount

alinaqiCLAUDE.md

maggy

alinaqi/maggy/CLAUDE.md

7115mo agoReviewMount

blogminhquyPipes a download into a shellCLAUDE.md

javis-os

blogminhquy/javis-os/CLAUDE.md

SYSTEM skills (`javis-builder`, `ingest-source`, `query-wiki`, `lint-wiki`, `notes`, `html-to-webcake`, `security-audit`) ship with the app in every brain: never recreate or clone them; edit

71110d agoReviewMount

CLAUDE.md vs AGENTS.md

About CLAUDE.md

What is CLAUDE.md?

A file Claude Code reads at the start of every session. It holds the commands, conventions and warnings the agent needs for this project.

Where does it go?

At the repository root. Claude Code also reads CLAUDE.md files in subdirectories when it works there.

What should it contain?

Build and test commands, the project's layout, conventions that aren't obvious from the code, and mistakes to avoid. Short files tend to work better than long ones.

CLAUDE.md or AGENTS.md?

Claude Code reads CLAUDE.md; most other agents read AGENTS.md. Many projects keep one and point the other at it.