CLAUDE.md examples from real projects

bigbluebuttonCLAUDE.md

bigbluebutton

bigbluebutton/bigbluebutton/CLAUDE.md

Agent Instructions ## 🔒 Security Policy — Read Before Any PR If you are preparing a pull request that involves: - A bug that could be exploited - Authentication, authorization, or cryptography changes - Dependency updates

keybaseCLAUDE.md

client

keybase/client/CLAUDE.md

three reviews against the diff before it is pushed: `/code-review high` (correctness), `/security-review` (security), and a simplification pass (`/simplify`, or read-only review agents for a large stack: duplicated helpers

davidkimaiCLAUDE.md

Context-Engineering

davidkimai/Context-Engineering/CLAUDE.md

paths" }, /evaluate{ quality="Assess code quality and best practices", performance="Identify potential performance issues", security="Spot potential security concerns", maintainability="Evaluate long-term maintainability" }, /summarize{ purpose="Describe the code

firezoneCLAUDE.md

firezone

firezone/firezone/CLAUDE.md

syntactically correct. - Focus on consistency and correctness. - Give extra special attention to any security-sensitive code, such as cryptographic operations, authentication logic, and access control mechanisms. ## Code contributions - Use [Conventional

securegoCLAUDE.md

gosec

securego/gosec/CLAUDE.md

gosec - Go Security Checker gosec is a Go static analysis tool that inspects Go source code for security vulnerabilities by scanning the Go AST and SSA form. ## Build & Test ```bash

Hiram-WongCLAUDE.md

zyfun

Hiram-Wong/zyfun/CLAUDE.md

typeName'); // get user data path getUserPath('typeName'); // get system data path ``` ### UI Design - TDesign ## Security - Never expose Node.js APIs directly to renderer; use `contextBridge` in preload - Validate all IPC inputs

fissionCLAUDE.md

fission

fission/fission/CLAUDE.md

claude/resources/fission-*.md`, loaded on demand by the generic CI/dep/triage skills (`debug-ci`, `go-deps-security-sweep`, `bump-ci-tool-versions`, etc.). Start there when

PydanticCLAUDE.md

monty

pydantic/monty/CLAUDE.md

model-checks` and `cargo test -p monty-fs` on Linux, macOS, and Windows ## Important Security Notice It's ABSOLUTELY CRITICAL that there's no way for code

No other project uses it yet

digoalCLAUDE.md

blog

digoal/blog/CLAUDE.md

AI/ML integration with databases - "德说" (德哥's personal insights on tech, economics, philosophy) - Database security, HA, performance tuning - Database source code learning series (源码入门学习) ## Adding New Content 1. **New blog

bitsandbytes-foundationCLAUDE.md

bitsandbytes

bitsandbytes-foundation/bitsandbytes/CLAUDE.md

vLLM depend on bitsandbytes (for assessing downstream impact) 6. `agents/security_guide.md` — Trust model and security checklist (especially for external contributor PRs) For CUDA kernel changes, also read `agents/kbit_gemm_context.md`. The PR review

No other project uses it yet

NomicFoundationCLAUDE.md

hardhat

NomicFoundation/hardhat/CLAUDE.md

Scoped docs to read - If changing anything in ./scripts/, read ./scripts/README.md first. - Before any security review or audit, read ./THREAT_MODEL.md first and follow it. ## Renovate Config When editing `renovate.json`, validate

AnthropicCLAUDE.md

claude-agent-sdk-python

anthropics/claude-agent-sdk-python/CLAUDE.md

Type definitions - `_internal/` - Internal implementation details - `transport/subprocess_cli.py` - CLI subprocess management - `message_parser.py` - Message parsing logic # Security hardening for GitHub Actions Workflow jobs in this repository that call Claude run with three

No other project uses it yet

EstrellaXDCLAUDE.md

Auto_Bangumi

EstrellaXD/Auto_Bangumi/CLAUDE.md

notification/ # Notification plugins (Telegram, Bark, etc.) │ ├── conf/ # Configuration management, settings │ ├── network/ # HTTP client utilities │ └── security/ # JWT authentication webui/src/ ├── api/ # Axios API client functions ├── components/ # Vue components (basic/, layout/, setting/) ├── pages

samberCLAUDE.md

awesome-prometheus-alerts

samber/awesome-prometheus-alerts/CLAUDE.md

Kubernetes, Nomad, Consul, Etcd, OpenStack), CI/CD (Jenkins, ArgoCD, FluxCD, GitLab CI, Spinnaker), network and security (SSL/TLS, CoreDNS, Vault, Cloudflare, Cilium, eBPF), storage (Ceph, ZFS, OpenEBS, Minio), cloud providers (AWS, Azure

xixu-meCLAUDE.md

Xget

xixu-me/Xget/CLAUDE.md

reverse proxy that transforms incoming requests to match various platform APIs while adding security headers, caching, retry logic, and performance monitoring. ## Development Commands ### Core Commands ```bash # Start development server (Cloudflare

nullclawCLAUDE.md

nullclaw

nullclaw/nullclaw/CLAUDE.md

http_util` 2. **Agent**: `agent`, `session`, `providers`, `memory` 3. **Networking**: `gateway`, `channels` 4. **Extensions**: `security`, `cron`, `health`, `tools`, `identity`, `cost`, `observability`, `heartbeat`, `runtime`, `mcp`, `subagent`, `auth`, `multimodal`, `agent_routing

chaos-meshCLAUDE.md

chaos-mesh

chaos-mesh/chaos-mesh/CLAUDE.md

corresponding portions of `make check`. `make gosec-scan` is a separate, non-blocking security report and is not part of `make check`. ### Code generation ```bash make generate make proto make

No other project uses it yet

leejetCLAUDE.md

stable-diffusion.cpp

leejet/stable-diffusion.cpp/CLAUDE.md

AGENTS.md` as the shared repository instructions. Do not duplicate contribution, style, PR, dependency, or security policy here; use `CONTRIBUTING.md` as the canonical source for those rules. Keep Claude-specific project

datahaven-xyzCLAUDE.md

datahaven

datahaven-xyz/datahaven/CLAUDE.md

with code in this repository. ## Project Overview DataHaven is an EVM-compatible Substrate blockchain secured by EigenLayer. It bridges Ethereum and Substrate ecosystems through: - EigenLayer AVS integration for security - Snowbridge

midudevCLAUDE.md

preguntas-entrevista-react

midudev/preguntas-entrevista-react/CLAUDE.md

make accessible". - `.claude/skills/accessibility/SKILL.md` - `.claude/skills/accessibility/references/WCAG.md` ## Best practices Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code