CLAUDE.md examples from real projects

mauriceboeReads credentialsCLAUDE.md

TREK / server

mauriceboe/TREK/server/CLAUDE.md

child-process runtime (`supervisor/`, `runtime/plugin-host-entry.ts`, `protocol/envelope.ts`) is **intentionally not Nest**; it is the security boundary. `host/rpc-host.ts` registers an RPC method at spawn only if the plugin holds the unlocking permission

mauriceboeCLAUDE.md

NOMAD / client

mauriceboe/NOMAD/client/CLAUDE.md

isEffectivelyOffline()` is the single source of truth — never read `navigator.onLine` in feature code. - **Rendering security**: never interpolate user content into HTML strings (map popups included — build via DOM + `textContent

moonD4rkCLAUDE.md

HackBrowserData

moonD4rk/HackBrowserData/CLAUDE.md

provides guidance to Claude Code (claude.ai/code) when working with code in this repository. ## Security Notice This project is for security research and defensive purposes only. Do not generate code

AndyMik90CLAUDE.md

Aperant

AndyMik90/Aperant/CLAUDE.md

assisted feature planning with strategic roadmap generation - **Ideation** — Discover improvements, performance issues, and security vulnerabilities - **GitHub/GitLab Integration** — Import issues, AI-powered investigation, PR/MR review and creation - **Changelog** — Generate release notes

apacheCLAUDE.md

dolphinscheduler / dolphinscheduler-api

apache/dolphinscheduler/dolphinscheduler-api/CLAUDE.md

task types via `TaskTypeConfiguration` reading `task-type-config.yaml` / `dynamic-task-type-config.yaml`. ## Configuration `src/main/resources`: - `application.yaml` — server port, datasource, registry, security mode, CORS, OpenAPI. - `task-type-config.yaml`, `dynamic-task-type-config.yaml` — the catalog of task types exposed to the UI. - `i18n/messages_

apacheCLAUDE.md

dolphinscheduler / dolphinscheduler-authentication

apache/dolphinscheduler/dolphinscheduler-authentication/CLAUDE.md

helpers. They share no code — they're bundled here because both are about injecting security behavior into the server stack. **This directory is a Maven parent POM.** ## Sub-modules - **`dolphinscheduler

apacheCLAUDE.md

dolphinscheduler / dolphinscheduler-meter

apache/dolphinscheduler/dolphinscheduler-meter/CLAUDE.md

config wiring. ## Related modules - `dolphinscheduler-common` — compile dep. - `dolphinscheduler-actuator-authentication` (in `dolphinscheduler-authentication/`) — secures the actuator endpoints this module exposes. - Every server module includes meter for metrics

apacheReads credentialsCLAUDE.md

dolphinscheduler / dolphinscheduler-ui

apache/dolphinscheduler/dolphinscheduler-ui/CLAUDE.md

theme`, `timezone`, `route`, `ui-setting`, `file`. - `views/` — page components: `home`, `projects`, `datasource`, `monitor`, `resource`, `security`, `login`, `profile`, `password`, `about`, `ui-setting`. - `utils/` — helpers. ## Backend integration - Axios base URL: `/dolphinscheduler

semaphoreuiCLAUDE.md

semaphore

semaphoreui/semaphore/.claude/CLAUDE.md

variables are forbidden. ## High Availability Support All solutions must work in High Availability mode. ## Security Is the #1 Priority All solutions must be secure by design. Do not consider

No other project uses it yet

bitwardenCLAUDE.md

clients

bitwarden/clients/.claude/CLAUDE.md

contributing.bitwarden.com/) - [Web Clients Setup Guide](https://contributing.bitwarden.com/getting-started/clients/) - [Code Style](https://contributing.bitwarden.com/contributing/code-style/) - [Security Whitepaper](https://bitwarden.com/help/bitwarden-security-white-paper/) - [Security Definitions](https://contributing.bitwarden.com/architecture/security/definitions)

567-labsCLAUDE.md

instructor

567-labs/instructor/CLAUDE.md

template - Link to relevant issues - **Update CHANGELOG.md**: Every PR that changes behavior (fix, feat, security, deprecation) must add an entry under the current `[Unreleased]` section in `CHANGELOG.md`. Format: `- **Area**: Description

No other project uses it yet

qazbnm456Reads credentialsCLAUDE.md

awesome-web-security

qazbnm456/awesome-web-security/CLAUDE.md

working in this repository. ## What this repo is A curated knowledge base of web security learning resources. Data lives in `data/categories.yml` and `data/entries/*.yml`; the three language READMEs (`README.md`, `README-zh.md

No other project uses it yet

OpenNHPReads credentialsCLAUDE.md

opennhp

OpenNHP/opennhp/CLAUDE.md

with code in this repository. ## Project Overview OpenNHP is a Go-based Zero Trust security toolkit implementing two core protocols: - **NHP (Network-infrastructure Hiding Protocol)**: Conceals server ports

coleam00Pipes a download into a shellCLAUDE.md

context-engineering-intro / claude-code-full-guide

coleam00/context-engineering-intro/claude-code-full-guide/CLAUDE.md

data = json.loads(line) # Process and yield each item yield process_item(data) ``` ## 🛡️ Security Best Practices ### Security Guidelines - Never commit secrets - use environment variables - Validate all user input with Pydantic

Orchestra-ResearchReads credentialsCLAUDE.md

AI-research-SKILLs

Orchestra-Research/AI-research-SKILLs/CLAUDE.md

Trusted Publishers settings. - **Provenance**: `--provenance` flag signs packages with Sigstore for supply chain security. - **Workflow**: `.github/workflows/publish-npm.yml` ### Bumping Versions **Always use `npm version`** (not manual edits) to keep `package-lock.json` in sync

MemTensorCLAUDE.md

MemOS

MemTensor/MemOS/CLAUDE.md

call chains, gather evidence | | `design-reviewer` | Read-only | Review design docs (architecture / interface / performance / security / requirement coverage) | | `code-reviewer` | Read-only | Review diffs and return APPROVE or CHANGES_REQUESTED | | `backend

JeffallanCLAUDE.md

claude-skills

Jeffallan/claude-skills/CLAUDE.md

existing skill directories. **Domain values:** `language` · `backend` · `frontend` · `infrastructure` · `api-architecture` · `quality` · `devops` · `security` · `data-ml` · `platform` · `specialized` · `workflow` --- ### Reference File Standards Reference files follow the [Agent Skills specification

No other project uses it yet

LeantimeReads credentialsCLAUDE.md

leantime

Leantime/leantime/CLAUDE.md

version behind 5. `LoadPlugins` - Fires events that trigger user plugin `register.php` loading 6. `InitialHeaders` - Security headers (CSP, X-Frame-Options) -- filterable by plugins 7. `AuthCheck` - Authentication (web guards + API guards

No other project uses it yet

CursorTouchReads credentialsCLAUDE.md

Windows-MCP

CursorTouch/Windows-MCP/CLAUDE.md

orange-red glowing border that briefly appears after every screenshot. Resolved in `desktop/flash_overlay.py`. | ## Security Context This server has **full system access** with no sandboxing. `PowerShell`, `FileSystem`, `Registry`, `Process

No other project uses it yet

Evan-lczReads credentialsCLAUDE.md

DeepResearch-RAG

Evan-lcz/DeepResearch-RAG/CLAUDE.md

legacy.md` - Documentation for legacy implementations - `CLAUDE.md` - Legacy-specific Claude instructions - `tests/` - Legacy-specific tests ### Security (`src/security/`) - `auth.py` - Authentication handler for LangGraph deployment ### Testing (`tests/`) - `run_evaluate.py` - Main evaluation script configured