CLAUDE.md examples from real projects

inventreeCLAUDE.md

InvenTree

inventree/InvenTree/CLAUDE.md

CONTRIBUTING.md](CONTRIBUTING.md) for codebase guidance. Security reports must follow the security policy in [SECURITY.md](docs/docs/SECURITY.md) and provide how they interact with the [threat model](docs/docs/concepts/threat_model.md). Do not open a pull

No other project uses it yet

h2oaiCLAUDE.md

h2o-3

h2oai/h2o-3/CLAUDE.md

when it's obvious (`bug`, `feature`, `docs`, `dependencies`, …). Skip if unclear. **CVE or security-related tasks must carry the `Security Vulnerability` label.** - **Relationships**: if a PR already exists

guardrails-aiCLAUDE.md

guardrails

guardrails-ai/guardrails/CLAUDE.md

IMPORTANT — always follow) This repo separates **compatibility** (what users are allowed to install) from **security** (what we actually ship and test against). The two live in different files and must

No other project uses it yet

AnthropicCLAUDE.md

defending-code-reference-harness

anthropics/defending-code-reference-harness/CLAUDE.md

Claude for Securing Source Code This repo has two halves: - **Interactive skills** (`.claude/skills/`) — read and write files in the repo (no target-code execution, except `/dnr-hunt` / `/dnr-respond`, which

enso-orgCLAUDE.md

enso

enso-org/enso/docs/CLAUDE.md

native image, dual-JVM, GraalVM upgrade, benchmarks, ydoc, logging. - `syntax/`, `semantics/`, `types/` — Language specification. - `security/`, `SECURITY.md` — Vulnerability reporting + policies. ## When to update - **New feature** → add to the subsystem

No other project uses it yet

TencentCLAUDE.md

AI-Infra-Guard

Tencent/AI-Infra-Guard/CLAUDE.md

rules organized by component - `data/eval/` — 13+ JSON jailbreak evaluation datasets - `data/mcp/` — YAML MCP security scan plugin rules ### Python Sub-projects These are invoked as subprocesses by Go agents, each

No other project uses it yet

jokob-skCLAUDE.md

NetAlertX

jokob-sk/NetAlertX/CLAUDE.md

assumption that's wrong once two async steps are both in play. - **Bug and security fixes are test-first: write the failing test, run it and see it fail

Serial-StudioCLAUDE.md

Serial-Studio

Serial-Studio/Serial-Studio/CLAUDE.md

before handoff.** Re-read the diff: is this *what was asked, and only that*? - **Security-sensitive surfaces are decision-visible.** `app/src/Licensing/`, `core/Core/Licensing/`, `MachineID`, and the API Server auth/consent files

TonyChen56CLAUDE.md

WeChatRobot

TonyChen56/WeChatRobot/CLAUDE.md

Architecture依赖**: Uses hardcoded offsets that change between versions - **稳定性**: 多年未维护，可能存在兼容性问题 - **仅供学习**: 不应用于生产环境或商业用途 ## Security Considerations ⚠️ **Warning**: This project involves: - DLL injection into another process - Function hooking and code interception - Reverse

fleetdmCLAUDE.md

fleet

fleetdm/fleet/.claude/CLAUDE.md

this repository. ## About Fleet Fleet is an open-source platform for IT and security teams: device management (MDM), vulnerability reporting, osquery fleet management, and security monitoring. Go backend, React/TypeScript frontend

No other project uses it yet

DimillianCLAUDE.md

IceCubesApp

Dimillian/IceCubesApp/CLAUDE.md

timeline, mentions, and accounts ### Important Implementation Details - **Multi-account**: Managed through `AppAccountsManager` with secure storage - **Push Notifications**: Custom proxy server implementation for privacy - **Theme System**: Extensive customization with

chillzhuangCLAUDE.md

SpringBlade

chillzhuang/SpringBlade/CLAUDE.md

Cloud Gateway（WebFlux） | | ORM | MyBatis-Plus + dynamic-datasource-spring-boot4-starter | | 安全 | blade-core-secure（JWT + 可选 AES 加密 + SM2 国密登录） | | 缓存 | BladeRedis（Protostuff 序列化，响应式 Gateway 侧用 Reactive Redis

Arthur-FicialCLAUDE.md

apfel

Arthur-Ficial/apfel/CLAUDE.md

Proper error types. Real token counts. - **Swift 6 strict concurrency.** No data races. - **Usable security.** Secure defaults that don't get in the way. - **TDD always, red-to-green

No other project uses it yet

airweave-aiCLAUDE.md

airweave

airweave-ai/airweave/CLAUDE.md

path (just `host.com/{endpoint}`) - Use logger from `ctx` (API) or `sync_context` (during sync) - Security: never use `random.*` for security values (ruff S311); use `secrets` module ### Frontend (TypeScript) - TailwindCSS with

czlonkowskiCLAUDE.md

n8n-skills

czlonkowski/n8n-skills/CLAUDE.md

user first) - Secret-free/domain-free templates in `assets/`; fresh secrets generated on the box; secure defaults; DNS/ports preflight; Day-2 update/backup/restore - Python Code nodes need task runners in external mode

No other project uses it yet

op7418CLAUDE.md

CodePilot

op7418/CodePilot/CLAUDE.md

test.ts` - fail-closed：分类器出错 / 空暂存集 / 非 `docs` 判定一律走全量门禁（防「前置失败被静默放行」回归） 高风险 docs（release / security / runtime / provider / permission / DB schema）即便走 docs 快路，也应手动跑 `npm run test`（必要时 build / smoke

aptos-labsCLAUDE.md

aptos-core

aptos-labs/aptos-core/CLAUDE.md

definitions used everywhere - `aptos-vm` - VM integration and transaction execution - `aptos-crypto` - Cryptographic primitives (security-critical) - `aptos-api-types` - API request/response types ## Safety-Critical Code These directories require extra care

No other project uses it yet

cryticCLAUDE.md

slither

crytic/slither/CLAUDE.md

slither/ ├── analyses/ # Data dependency, dominators, control flow ├── core/ # Core classes: SlitherCore, Contract, Function ├── detectors/ # Security checks (subclass AbstractDetector) ├── printers/ # Output formatters (subclass AbstractPrinter) ├── slithir/ # Intermediate representation for analysis ├── solc_parsing

androguardCLAUDE.md

androguard

androguard/androguard/CLAUDE.md

large `workspace/output/` trees. - Do not invent APIs; read `androguard/application.py` and `androguard/cli/main.py` when unsure. - Authorized security analysis only; do not help with malware distribution or unauthorized access

FlorianBruniauxCLAUDE.md

claude-code-ultimate-guide

FlorianBruniaux/claude-code-ultimate-guide/CLAUDE.md

printable summary ├── cowork.md # Cowork redirect page ├── core/ # Architecture, methodologies, releases, known-issues, visual-reference ├── security/ # security-hardening, sandbox-isolation, sandbox-native, production-safety, data-privacy ├── ecosystem/ # ai-ecosystem, mcp-servers

No other project uses it yet