automated-security-helper / claude
awslabs/automated-security-helper/ash-agent-plugins/agentic-coding/plugins/claude/CLAUDE.md
Security Scanner @../AGENTS.md
How real projects brief Claude Code: the commands, conventions and warnings they put in CLAUDE.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
awslabs/automated-security-helper/ash-agent-plugins/agentic-coding/plugins/claude/CLAUDE.md
Security Scanner @../AGENTS.md
duanebester/gooey/CLAUDE.md
standardized tool already used by the repository. Every additional tool adds installation, portability, security, and maintenance cost. Prefer Zig programs to shell scripts for repository automation. Zig scripts are cross
AlexsJones/sympozium/CLAUDE.md
with per-key `SecretKeyRef`. Never `EnvFrom` a whole secret into an agent/sidecar pod. - **Pod security**: agent pods run non-root, `readOnlyRootFilesystem`, `drop: [ALL]`, RuntimeDefault seccomp. Match this
PaulDuvall/ai-development-patterns/CLAUDE.md
proper markdown hyperlinks to related patterns ### Pattern Dependencies - **Foundation patterns**: Establish team readiness, security, and basic AI integration - **Development patterns**: Daily workflows for AI-assisted coding - **Operations patterns**: CI/CD, security
majiayu000/claude-skill-registry/CLAUDE.md
place. ## Repo Map - `claude-skill-registry-core`: source of truth for discovery, download, dedupe, security scanning, registry/search-index generation, Pages, and publish orchestration. - `claude-skill-registry-data`: archive repo. Canonical layout
mhattingpete/claude-skills-marketplace/CLAUDE.md
Explore agent for thorough codebase mapping 2. Use Grep for pattern detection (security issues, TODOs) 3. Use Read for detailed file analysis 4. Use Bash to run linters/analyzers if available
Scottcjn/Rustchain/explorer/CLAUDE.md
CLAUDE.md — RustChain Block Explorer Security Audit ## Context Red team security audit of `explorer/enhanced-explorer.html` (PR #4). **DO NOT use the original `enhanced-explorer.html` in production until all vulnerabilities are patched.** ## Vulnerabilities Found
Scottcjn/Rustchain/payment-widget/CLAUDE.md
CLAUDE.md — RustChain Payment Widget Security Audit ## Context This is a **Red Team security audit** of the RustChain Payment Widget (`payment-widget/rustchain-pay.js`), merged in PR #13. **DO NOT deploy
ThibautBaissac/rails_ai_agents/.claude_37signals/CLAUDE.md
RSpec, not FactoryBot) - **Auth:** Custom passwordless: passkeys (WebAuthn) + magic links (no Devise), `has_secure_password` optional - **Background Jobs:** Solid Queue (database-backed, no Redis) - **Caching:** Solid Cache | **WebSockets:** Solid Cable
epam/ai-dial-core/CLAUDE.md
integration (AWS/Azure/GCP) | | `server` | `com.epam.aidial.core.server` | Entry point (`AiDial.java`), HTTP proxy engine (`Proxy.java`), all controllers, services, security, rate limiting, upstream load balancing, telemetry | | `openapi-annotations` | `com.epam.aidial.core.openapi.annotations` | Custom annotations for describing OpenAPI operations
joaoh82/rustunnel/CLAUDE.md
working with code in this repository. ## What is rustunnel rustunnel is a self-hosted secure tunnel server written in Rust (similar to ngrok). It exposes local services through a public
sunyink/MFABD2/CLAUDE.md
revert` - **Tier 2**(维护类):`docs` / `style` / `test` / `chore` / `ci` / `build` 解析不出前缀的提交落入 `other` 组。注意 **`security` 不在任何分层里**,用了会掉进 other。 **scope 会提升分层**:`chore(fix): xxx` 这种「Tier 2 类型 + Tier 1 scope
zjs81/meshcore-open/CLAUDE.md
protocol reference](documentation/ble-protocol.md). Web supports USB via Web Serial in Chrome only, over a secure origin. BLE is not available in the browser (the scanner shows a snackbar instead
vchelaru/Gum/CLAUDE.md
docs-writer** — Writing or updating documentation - **product-manager** — Breaking down tasks and tracking progress - **security-auditor** — Security reviews and vulnerability assessments Select the agent that best matches the task
seo-skills/seo-audit-skill/claude.md
validateCategoryWeights()` in `src/categories/index.ts`) ### 20 Categories & Weights core(11%), perf(10%), links(8%), images(8%), security(8%), a11y(7%), technical(7%), crawl(5%), schema(5%), content(5%), js(5%), social
SecOps-7/MikroDash/CLAUDE.md
wants `ciphertext‖tag`; and `users.json` must stay a bare JSON array, which is a security property rather than a preference. `cmd/compat` checks all three against a real `/data`. **Database identity
spellshift/realm/CLAUDE.md
portal` | Bi-directional portal streams | | `process` | Process management, PID, and environment variables | | `random` | Cryptographically secure random | | `regex` | Regular expression operations | | `registry`| Windows Registry reading and writing (`read`, `write`) | | `report` | Structured
xunholy/k8s-gitops/CLAUDE.md
personal homelab cluster managed with FluxCD and Talos Linux. The cluster follows enterprise-grade security and observability practices, showcasing CNCF ecosystem tools. ## Architecture - **Operating System**: Talos Linux (minimal, immutable Kubernetes
loongclaw-ai/loongclaw/CLAUDE.md
engineering | `docs/design-docs/harness-engineering.md` | | Code standards, test layout & review checks | `docs/design-docs/code-standards.md` | | Roadmap | `docs/ROADMAP.md` | | Reliability invariants | `docs/RELIABILITY.md` | | Security model & gaps | `docs/SECURITY.md` | | Product sense & principles | `docs/PRODUCT_SENSE.md` | | Release process conventions | `docs/releases/README.md` | | Product requirements / implementation plans
akash3444/shadcn-ui-blocks/.claude/CLAUDE.md
Prefer simple conditionals over nested ternary operators - Group related code together and separate concerns ### Security - Add `rel="noopener"` when using `target="_blank"` on links - Avoid `dangerouslySetInnerHTML` unless absolutely necessary
A file Claude Code reads at the start of every session. It holds the commands, conventions and warnings the agent needs for this project.
At the repository root. Claude Code also reads CLAUDE.md files in subdirectories when it works there.
Build and test commands, the project's layout, conventions that aren't obvious from the code, and mistakes to avoid. Short files tend to work better than long ones.
Claude Code reads CLAUDE.md; most other agents read AGENTS.md. Many projects keep one and point the other at it.