CLAUDE.md examples from real projects

DockerCLAUDE.md

mcp-gateway

docker/mcp-gateway/CLAUDE.md

Overview This is the **Docker MCP Gateway** - a CLI plugin that enables easy and secure running of Model Context Protocol (MCP) servers through Docker containers. The plugin acts

No other project uses it yet

amdReads credentialsCLAUDE.md

gaia

amd/gaia/CLAUDE.md

Never restate part 1 inside it. Two things are never collapsed: a 🔒 security finding with the @kovtcharov-amd tag, and a PR's Test plan. ### The shape ❌ **Technical-first

No other project uses it yet

iotexprojectCLAUDE.md

iotex-core / consensus

iotexproject/iotex-core/consensus/CLAUDE.md

proposer/endorser-is-a-valid-delegate checks run before `ProduceReceiveBlockEvent` etc. are emitted (`rolldpos.go`). Reordering this is a security break. ### Do not retain endorsements past round start - `endorsementmanager.go` discards endorsements older than the current round

Flux159CLAUDE.md

mcp-server-kubernetes

Flux159/mcp-server-kubernetes/CLAUDE.md

that's needed — CD handles the version bump, publish, and asset uploads from there. ## Security Fixes and Coordinated Disclosure When a change fixes a security issue tracked by a GHSA

silversteinCLAUDE.md

minutes

silverstein/minutes/CLAUDE.md

capture + streaming) │ │ ├── transcribe.rs # Batch transcription: whisper.cpp. Retained Parakeet config resolves to Whisper until secure transport exists │ │ ├── diarize.rs # Speaker diarization + attribution types (pyannote-rs, or energy-based from per-source stems

No other project uses it yet

tom-james-watsonCLAUDE.md

breaktimer-app

tom-james-watson/breaktimer-app/CLAUDE.md

Settings, etc.) - **Styling**: CSS with Tailwind CSS - **Sounds**: Audio files for notifications - **Preload**: `preload.js` - Secure IPC bridge - **Fonts**: Inter font bundled in `public/fonts/` ### Types (`app/types/`) - Shared TypeScript definitions

nats-ioCLAUDE.md

nats.rs

nats-io/nats.rs/CLAUDE.md

fully async, Tokio-based client. > **The `nats` crate (synchronous client) is deprecated.** It receives security fixes only. All new > work happens in `async-nats`. Do not modify the `nats/` directory

No other project uses it yet

six2dezCLAUDE.md

burp-ai-agent

six2dez/burp-ai-agent/CLAUDE.md

exposes Burp operations to external AI agents over the Model Context Protocol (MCP). Targets security professionals running Burp Community or Professional on macOS / Linux / Windows. **Core Value:** Bring modern

Open-Source-LegalCLAUDE.md

OpenContracts

Open-Source-Legal/OpenContracts/CLAUDE.md

issue #820): operational exceptions are caught and returned as error strings to the LLM; security exceptions (`PermissionError`, `ToolConfirmationRequired`) propagate. - Pre-execution checks run on every call (not cached): permission validation

LUC4N3XCLAUDE.md

Levyra-deepsound / claude

LUC4N3X/Levyra-deepsound/.agents/claude/CLAUDE.md

levyra-compose`, `levyra-design-taste`, `levyra-android-performance`, `levyra-r8-proguard`, `levyra-android-intent-security`, `levyra-ci-workflows`, `levyra-context-efficiency`, `levyra-pr-review`, `levyra-release-check`. The shared router

daymadePipes a download into a shellCLAUDE.md

claude-code-skills

daymade/claude-code-skills/CLAUDE.md

facing materialization from any directory, use the [fixed command entry](daymade-skill/skill-creator/references/fixed-command-entry.md). For security scans, use its [absolute owner-script recipe](daymade-skill/skill-creator/references/publishing-and-packaging.md#step-6-security-review). Before

kaansenol5CLAUDE.md

VibeOS

kaansenol5/VibeOS/CLAUDE.md

mountable on macOS - [x] Interrupts - GIC-400 working! Keyboard via IRQ, boots at EL3 (Secure) - [x] Timer - 10ms tick (100Hz), used for uptime tracking - [x] System Monitor - GUI app showing

umputunReads credentialsCLAUDE.md

ralphex

umputun/ralphex/CLAUDE.md

# ralphex Autonomous plan execution with Claude Code - Go rewrite of ralph.py. ## LLM Documentation See

geodroReads credentialsCLAUDE.md

lerd

geodro/lerd/CLAUDE.md

report issues use `Refs #N` and stay open until the stable release ships — **except** security issues, which close once the fix merges to main. - PR/issue comment style: casual plain prose

ishaan1013CLAUDE.md

shadow

ishaan1013/shadow/CLAUDE.md

task management. The platform provides both local and remote execution modes with enterprise-grade security. ### Core Architecture **Monorepo Structure** (Turborepo managed): - `apps/frontend/` - Next.js 15 + React 19 application with real-time

ducktorsCLAUDE.md

turborepo-remote-cache

ducktors/turborepo-remote-cache/CLAUDE.md

symbol — callers, callees, which execution flows it participates in — use `context({name: "symbolName"})`. - For security review, `explain({target: "fileOrSymbol"})` lists taint findings (source→sink flows; needs `analyze --pdg`). ## Never

autonomous-aiReads credentialsCLAUDE.md

openharness / desktop

autonomous-ai/openharness/desktop/CLAUDE.md

# CLAUDE.md This file provides guidance to Claude Code (claude.ai/code) when working with code

amir20CLAUDE.md

dtop

amir20/dtop/CLAUDE.md

# CLAUDE.md This file provides guidance to Claude Code (claude.ai/code) when working with code

psd-toolsCLAUDE.md

psd-tools

psd-tools/psd-tools/CLAUDE.md

public surface: a new or renamed symbol, a new parameter, a corrected annotation - `[security]` — security fixes - `[docs]` — documentation only - `[ci]` — what a user installs: the wheels, platforms or sdist contents

No other project uses it yet

akitaonrailsReads credentialsCLAUDE.md

ai-jail

akitaonrails/ai-jail/CLAUDE.md

migration inputs. ai-jail is a developer-friendly accident guard, not a hard-security or malware/invasion boundary. It defends against a trusted-but-fallible agent's mistakes (a mistyped command