CLAUDE.md examples from real projects

grafanaCLAUDE.md

pyroscope / ui

grafana/pyroscope/ui/CLAUDE.md

many dependencies which have caused a burden on the maintainers with the security risk. There are too many packages that need constant upgrading. The new UI's objective

WhiskeySocketsCLAUDE.md

Baileys

WhiskeySockets/Baileys/CLAUDE.md

authorship disclosure rules and the broader AI policy, see **[CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md)** § AI Policy. For security-sensitive changes and vulnerability disclosure, see **[SECURITY.md](SECURITY.md

No other project uses it yet

CursorTouchReads credentialsCLAUDE.md

Windows-MCP

CursorTouch/Windows-MCP/CLAUDE.md

orange-red glowing border that briefly appears after every screenshot. Resolved in `desktop/flash_overlay.py`. | ## Security Context This server has **full system access** with no sandboxing. `PowerShell`, `FileSystem`, `Registry`, `Process

No other project uses it yet

nexmoeCLAUDE.md

VidBee

nexmoe/VidBee/.claude/CLAUDE.md

Prefer simple conditionals over nested ternary operators - Group related code together and separate concerns ### Security - Add `rel="noopener"` when using `target="_blank"` on links - Avoid `dangerouslySetInnerHTML` unless absolutely necessary

HeroToolsReads credentialsCLAUDE.md

open-whispr

HeroTools/open-whispr/CLAUDE.md

main, IPC handlers, database operations - Renderer Process: React app with context isolation - Preload Script: Secure bridge between processes - ONNX Utility Process: hosts all `onnxruntime-node` inference (text embeddings, speaker embeddings

FreikaReads credentialsCLAUDE.md

dawarich

Freika/dawarich/CLAUDE.md

permanent - **UUID-based access**: Each shared stat has a unique, unguessable UUID for security - **Public API endpoints**: Hexagon map data can be accessed via API without authentication when sharing

No other project uses it yet

Ranchero-SoftwareCLAUDE.md

NetNewsWire

Ranchero-Software/NetNewsWire/CLAUDE.md

models - **ArticlesDatabase**: Article storage and search functionality - **SyncDatabase**: Cross-device synchronization state management - **Secrets**: Secure credential and API key management ### Platform-Specific Code - **Mac/**: macOS-specific UI (AppKit), preferences, main

Saptha-meReads credentialsCLAUDE.md

Bindu

Saptha-me/Bindu/CLAUDE.md

execute → verify - Real HTTP requests, real gRPC calls - Slow (5-30s per test) ## Security Model ### Layer 1: Transport (mTLS) - PLANNED - X.509 certificates from Smallstep step-ca - Mutual authentication between

go-swaggerCLAUDE.md

go-swagger

go-swagger/go-swagger/.claude/CLAUDE.md

docs to GitHub Pages | | `auto-merge.yaml` | Dependabot PRs | Auto-merge dependency updates | | `codeql.yaml` | Schedule, PR | Security analysis | | `scorecard.yaml` | Schedule, push | OpenSSF scorecard | ### Release artifacts A tagged release produces: - Signed binaries (linux/darwin/windows

No other project uses it yet

dr5hnReads credentialsCLAUDE.md

countries-states-cities-database

dr5hn/countries-states-cities-database/.claude/CLAUDE.md

environment | | `untrusted-content-watch.yml` | Issue, comment or PR description from an outside contributor | Labels `security-review` and alerts Slack on injection signs (hidden commands, workflow expressions, AI-agent instructions, exfiltration hosts) | **Workflow

AnthropicCLAUDE.md

claude-code-action

anthropics/claude-code-action/CLAUDE.md

retry logic (`src/utils/retry.ts`). - MCP servers are auto-installed at runtime to `~/.claude/mcp/github-{type}-server/`. ## Security hardening for GitHub Actions Workflow jobs in this repository that call Claude run with three

EvolutionAPIReads credentialsCLAUDE.md

evolution-api

EvolutionAPI/evolution-api/CLAUDE.md

determines active database - Migration folders are provider-specific and auto-selected during deployment ### Authentication & Security - **API key-based authentication** via `apikey` header (global or per-instance) - **Instance-specific tokens

pixel-agents-hqReads credentialsCLAUDE.md

pixel-agents

pixel-agents-hq/pixel-agents/CLAUDE.md

selection handles (DOM; styled in index.css) clipboard.ts The one clipboard write/read: Clipboard API on secure origins; plain http falls back to a copy event (write) / a native prompt (paste) flowCopy.ts

telekom-securityReads credentialsCLAUDE.md

tpotce

telekom-security/tpotce/CLAUDE.md

show up in Kibana/Attack Map. - **Attack Map** (`docker/elk/map/`): builds from the external `telekom-security/t-pot-attack-map` repo at a pinned tag; `map_data` polls ES and publishes to Redis

bitwardenCLAUDE.md

android

bitwarden/android/.claude/CLAUDE.md

Claude Code Configuration Official Android application for Bitwarden Password Manager and Bitwarden Authenticator, providing secure password management, two-factor authentication, and credential autofill services with zero-knowledge encryption. ## Overview - Multi

AnthropicCLAUDE.md

claude-for-legal

anthropics/claude-for-legal/CLAUDE.md

toolset`); MCP and write tools belong to specific subagent leaves. 2. The README's security table and the `agent.yaml` comments must match what the YAML actually grants. Don't claim

No other project uses it yet

AnthropicCLAUDE.md

claude-for-legal / litigation-legal

anthropics/claude-for-legal/litigation-legal/CLAUDE.md

Matters with media / reputational risk | | CISO | [PLACEHOLDER] | | Data incidents, cyber litigation, regulator inquiries on security | | Board litigation / audit committee chair | [PLACEHOLDER] | | Critical matters, disclosure items | ### This counsel **Counsel:** [PLACEHOLDER] **Reports

No other project uses it yet

AnthropicCLAUDE.md

claude-for-legal / privacy-legal

anthropics/claude-for-legal/privacy-legal/CLAUDE.md

DSAR | [PLACEHOLDER] | | | | DPA negotiation | | | | | High-risk PIA | | | | | Regulator contact | — | [GC + you] | Always | | Suspected breach | — | [Security + GC] | Always | --- ## Seed documents | Doc | Location | Reviewed | Notes | |---|---|---|---| | Privacy policy | [PLACEHOLDER] | | | | DPA template | [PLACEHOLDER] | | | | Reference

No other project uses it yet

AnthropicCLAUDE.md

claude-for-legal / product-legal

anthropics/claude-for-legal/product-legal/CLAUDE.md

# Product Legal Practice Profile *Written by cold-start on [DATE]. If you see `[PLACEHOLDER

No other project uses it yet

saulpwCLAUDE.md

visidata

saulpw/visidata/CLAUDE.md

clickable links) - Option and command reference format - Technical writing guidelines ### [dev/SECURITY.md](dev/SECURITY.md) - Handling a Security Report Use this when a vulnerability is reported privately, or a fix must stay embargoed

No other project uses it yet