CLAUDE.md examples from real projects

Orchestra-ResearchReads credentialsCLAUDE.md

AI-research-SKILLs

Orchestra-Research/AI-research-SKILLs/CLAUDE.md

Trusted Publishers settings. - **Provenance**: `--provenance` flag signs packages with Sigstore for supply chain security. - **Workflow**: `.github/workflows/publish-npm.yml` ### Bumping Versions **Always use `npm version`** (not manual edits) to keep `package-lock.json` in sync

MemTensorCLAUDE.md

MemOS

MemTensor/MemOS/CLAUDE.md

call chains, gather evidence | | `design-reviewer` | Read-only | Review design docs (architecture / interface / performance / security / requirement coverage) | | `code-reviewer` | Read-only | Review diffs and return APPROVE or CHANGES_REQUESTED | | `backend

No other project uses it yet

JeffallanCLAUDE.md

claude-skills

Jeffallan/claude-skills/CLAUDE.md

existing skill directories. **Domain values:** `language` · `backend` · `frontend` · `infrastructure` · `api-architecture` · `quality` · `devops` · `security` · `data-ml` · `platform` · `specialized` · `workflow` --- ### Reference File Standards Reference files follow the [Agent Skills specification

LeantimeReads credentialsCLAUDE.md

leantime

Leantime/leantime/CLAUDE.md

version behind 5. `LoadPlugins` - Fires events that trigger user plugin `register.php` loading 6. `InitialHeaders` - Security headers (CSP, X-Frame-Options) -- filterable by plugins 7. `AuthCheck` - Authentication (web guards + API guards

grafanaCLAUDE.md

pyroscope / ui

grafana/pyroscope/ui/CLAUDE.md

many dependencies which have caused a burden on the maintainers with the security risk. There are too many packages that need constant upgrading. The new UI's objective

No other project uses it yet

WhiskeySocketsCLAUDE.md

Baileys

WhiskeySockets/Baileys/CLAUDE.md

authorship disclosure rules and the broader AI policy, see **[CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md)** § AI Policy. For security-sensitive changes and vulnerability disclosure, see **[SECURITY.md](SECURITY.md

No other project uses it yet

bunkerityCLAUDE.md

bunkerweb

bunkerity/bunkerweb/CLAUDE.md

Application Firewall (WAF) built on NGINX with a modular plugin architecture. It provides "security by default" for web services through multiple integration modes (Docker, Kubernetes, Swarm, Linux) and is fully

nexmoeCLAUDE.md

VidBee

nexmoe/VidBee/.claude/CLAUDE.md

Prefer simple conditionals over nested ternary operators - Group related code together and separate concerns ### Security - Add `rel="noopener"` when using `target="_blank"` on links - Avoid `dangerouslySetInnerHTML` unless absolutely necessary

CursorTouchReads credentialsCLAUDE.md

Windows-MCP

CursorTouch/Windows-MCP/CLAUDE.md

orange-red glowing border that briefly appears after every screenshot. Resolved in `desktop/flash_overlay.py`. | ## Security Context This server has **full system access** with no sandboxing. `PowerShell`, `FileSystem`, `Registry`, `Process

No other project uses it yet

FreikaReads credentialsCLAUDE.md

dawarich

Freika/dawarich/CLAUDE.md

permanent - **UUID-based access**: Each shared stat has a unique, unguessable UUID for security - **Public API endpoints**: Hexagon map data can be accessed via API without authentication when sharing

OpenWhisprReads credentialsCLAUDE.md

openwhispr

OpenWhispr/openwhispr/CLAUDE.md

main, IPC handlers, database operations - Renderer Process: React app with context isolation - Preload Script: Secure bridge between processes - ONNX Utility Process: hosts all `onnxruntime-node` inference (text embeddings, speaker embeddings

Ranchero-SoftwareCLAUDE.md

NetNewsWire

Ranchero-Software/NetNewsWire/CLAUDE.md

models - **ArticlesDatabase**: Article storage and search functionality - **SyncDatabase**: Cross-device synchronization state management - **Secrets**: Secure credential and API key management ### Platform-Specific Code - **Mac/**: macOS-specific UI (AppKit), preferences, main

Saptha-meReads credentialsCLAUDE.md

Bindu

Saptha-me/Bindu/CLAUDE.md

execute → verify - Real HTTP requests, real gRPC calls - Slow (5-30s per test) ## Security Model ### Layer 1: Transport (mTLS) - PLANNED - X.509 certificates from Smallstep step-ca - Mutual authentication between

go-swaggerCLAUDE.md

go-swagger

go-swagger/go-swagger/.claude/CLAUDE.md

docs to GitHub Pages | | `auto-merge.yaml` | Dependabot PRs | Auto-merge dependency updates | | `codeql.yaml` | Schedule, PR | Security analysis | | `scorecard.yaml` | Schedule, push | OpenSSF scorecard | ### Release artifacts A tagged release produces: - Signed binaries (linux/darwin/windows

EvolutionAPIReads credentialsCLAUDE.md

evolution-api

EvolutionAPI/evolution-api/CLAUDE.md

determines active database - Migration folders are provider-specific and auto-selected during deployment ### Authentication & Security - **API key-based authentication** via `apikey` header (global or per-instance) - **Instance-specific tokens

pixel-agents-hqReads credentialsCLAUDE.md

pixel-agents

pixel-agents-hq/pixel-agents/CLAUDE.md

selection handles (DOM; styled in index.css) clipboard.ts The one clipboard write/read: Clipboard API on secure origins; plain http falls back to a copy event (write) / a native prompt (paste) flowCopy.ts

AnthropicCLAUDE.md

claude-code-action

anthropics/claude-code-action/CLAUDE.md

retry logic (`src/utils/retry.ts`). - MCP servers are auto-installed at runtime to `~/.claude/mcp/github-{type}-server/`. ## Security hardening for GitHub Actions Workflow jobs in this repository that call Claude run with three

No other project uses it yet

telekom-securityReads credentialsCLAUDE.md

tpotce

telekom-security/tpotce/CLAUDE.md

show up in Kibana/Attack Map. - **Attack Map** (`docker/elk/map/`): builds from the external `telekom-security/t-pot-attack-map` repo at a pinned tag; `map_data` polls ES and publishes to Redis

bitwardenCLAUDE.md

android

bitwarden/android/.claude/CLAUDE.md

Claude Code Configuration Official Android application for Bitwarden Password Manager and Bitwarden Authenticator, providing secure password management, two-factor authentication, and credential autofill services with zero-knowledge encryption. ## Overview - Multi

No other project uses it yet

Evan-lczReads credentialsCLAUDE.md

DeepResearch-RAG

Evan-lcz/DeepResearch-RAG/CLAUDE.md

legacy.md` - Documentation for legacy implementations - `CLAUDE.md` - Legacy-specific Claude instructions - `tests/` - Legacy-specific tests ### Security (`src/security/`) - `auth.py` - Authentication handler for LangGraph deployment ### Testing (`tests/`) - `run_evaluate.py` - Main evaluation script configured