CLAUDE.md examples from real projects

MemTensorCLAUDE.md

MemOS

MemTensor/MemOS/CLAUDE.md

call chains, gather evidence | | `design-reviewer` | Read-only | Review design docs (architecture / interface / performance / security / requirement coverage) | | `code-reviewer` | Read-only | Review diffs and return APPROVE or CHANGES_REQUESTED | | `backend

No other project uses it yet

JeffallanCLAUDE.md

claude-skills

Jeffallan/claude-skills/CLAUDE.md

existing skill directories. **Domain values:** `language` · `backend` · `frontend` · `infrastructure` · `api-architecture` · `quality` · `devops` · `security` · `data-ml` · `platform` · `specialized` · `workflow` --- ### Reference File Standards Reference files follow the [Agent Skills specification

LeantimeReads credentialsCLAUDE.md

leantime

Leantime/leantime/CLAUDE.md

version behind 5. `LoadPlugins` - Fires events that trigger user plugin `register.php` loading 6. `InitialHeaders` - Security headers (CSP, X-Frame-Options) -- filterable by plugins 7. `AuthCheck` - Authentication (web guards + API guards

grafanaCLAUDE.md

pyroscope / ui

grafana/pyroscope/ui/CLAUDE.md

many dependencies which have caused a burden on the maintainers with the security risk. There are too many packages that need constant upgrading. The new UI's objective

No other project uses it yet

WhiskeySocketsCLAUDE.md

Baileys

WhiskeySockets/Baileys/CLAUDE.md

authorship disclosure rules and the broader AI policy, see **[CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md)** § AI Policy. For security-sensitive changes and vulnerability disclosure, see **[SECURITY.md](SECURITY.md

No other project uses it yet

nexmoeCLAUDE.md

VidBee

nexmoe/VidBee/.claude/CLAUDE.md

Prefer simple conditionals over nested ternary operators - Group related code together and separate concerns ### Security - Add `rel="noopener"` when using `target="_blank"` on links - Avoid `dangerouslySetInnerHTML` unless absolutely necessary

CursorTouchReads credentialsCLAUDE.md

Windows-MCP

CursorTouch/Windows-MCP/CLAUDE.md

orange-red glowing border that briefly appears after every screenshot. Resolved in `desktop/flash_overlay.py`. | ## Security Context This server has **full system access** with no sandboxing. `PowerShell`, `FileSystem`, `Registry`, `Process

No other project uses it yet

FreikaReads credentialsCLAUDE.md

dawarich

Freika/dawarich/CLAUDE.md

permanent - **UUID-based access**: Each shared stat has a unique, unguessable UUID for security - **Public API endpoints**: Hexagon map data can be accessed via API without authentication when sharing

HeroToolsReads credentialsCLAUDE.md

open-whispr

HeroTools/open-whispr/CLAUDE.md

main, IPC handlers, database operations - Renderer Process: React app with context isolation - Preload Script: Secure bridge between processes - ONNX Utility Process: hosts all `onnxruntime-node` inference (text embeddings, speaker embeddings

Ranchero-SoftwareCLAUDE.md

NetNewsWire

Ranchero-Software/NetNewsWire/CLAUDE.md

models - **ArticlesDatabase**: Article storage and search functionality - **SyncDatabase**: Cross-device synchronization state management - **Secrets**: Secure credential and API key management ### Platform-Specific Code - **Mac/**: macOS-specific UI (AppKit), preferences, main

Saptha-meReads credentialsCLAUDE.md

Bindu

Saptha-me/Bindu/CLAUDE.md

execute → verify - Real HTTP requests, real gRPC calls - Slow (5-30s per test) ## Security Model ### Layer 1: Transport (mTLS) - PLANNED - X.509 certificates from Smallstep step-ca - Mutual authentication between

go-swaggerCLAUDE.md

go-swagger

go-swagger/go-swagger/.claude/CLAUDE.md

docs to GitHub Pages | | `auto-merge.yaml` | Dependabot PRs | Auto-merge dependency updates | | `codeql.yaml` | Schedule, PR | Security analysis | | `scorecard.yaml` | Schedule, push | OpenSSF scorecard | ### Release artifacts A tagged release produces: - Signed binaries (linux/darwin/windows

dr5hnReads credentialsCLAUDE.md

countries-states-cities-database

dr5hn/countries-states-cities-database/.claude/CLAUDE.md

environment | | `untrusted-content-watch.yml` | Issue, comment or PR description from an outside contributor | Labels `security-review` and alerts Slack on injection signs (hidden commands, workflow expressions, AI-agent instructions, exfiltration hosts) | **Workflow

EvolutionAPIReads credentialsCLAUDE.md

evolution-api

EvolutionAPI/evolution-api/CLAUDE.md

determines active database - Migration folders are provider-specific and auto-selected during deployment ### Authentication & Security - **API key-based authentication** via `apikey` header (global or per-instance) - **Instance-specific tokens

pixel-agents-hqReads credentialsCLAUDE.md

pixel-agents

pixel-agents-hq/pixel-agents/CLAUDE.md

selection handles (DOM; styled in index.css) clipboard.ts The one clipboard write/read: Clipboard API on secure origins; plain http falls back to a copy event (write) / a native prompt (paste) flowCopy.ts

AnthropicCLAUDE.md

claude-code-action

anthropics/claude-code-action/CLAUDE.md

retry logic (`src/utils/retry.ts`). - MCP servers are auto-installed at runtime to `~/.claude/mcp/github-{type}-server/`. ## Security hardening for GitHub Actions Workflow jobs in this repository that call Claude run with three

No other project uses it yet

telekom-securityReads credentialsCLAUDE.md

tpotce

telekom-security/tpotce/CLAUDE.md

show up in Kibana/Attack Map. - **Attack Map** (`docker/elk/map/`): builds from the external `telekom-security/t-pot-attack-map` repo at a pinned tag; `map_data` polls ES and publishes to Redis

bitwardenCLAUDE.md

android

bitwarden/android/.claude/CLAUDE.md

Claude Code Configuration Official Android application for Bitwarden Password Manager and Bitwarden Authenticator, providing secure password management, two-factor authentication, and credential autofill services with zero-knowledge encryption. ## Overview - Multi

No other project uses it yet

AnthropicCLAUDE.md

claude-for-legal

anthropics/claude-for-legal/CLAUDE.md

toolset`); MCP and write tools belong to specific subagent leaves. 2. The README's security table and the `agent.yaml` comments must match what the YAML actually grants. Don't claim

No other project uses it yet

AnthropicCLAUDE.md

claude-for-legal / litigation-legal

anthropics/claude-for-legal/litigation-legal/CLAUDE.md

Matters with media / reputational risk | | CISO | [PLACEHOLDER] | | Data incidents, cyber litigation, regulator inquiries on security | | Board litigation / audit committee chair | [PLACEHOLDER] | | Critical matters, disclosure items | ### This counsel **Counsel:** [PLACEHOLDER] **Reports

No other project uses it yet