CLAUDE.md examples from real projects

HeroToolsReads credentialsCLAUDE.md

open-whispr

HeroTools/open-whispr/CLAUDE.md

main, IPC handlers, database operations - Renderer Process: React app with context isolation - Preload Script: Secure bridge between processes - ONNX Utility Process: hosts all `onnxruntime-node` inference (text embeddings, speaker embeddings

AnthropicCLAUDE.md

claude-for-legal

anthropics/claude-for-legal/CLAUDE.md

toolset`); MCP and write tools belong to specific subagent leaves. 2. The README's security table and the `agent.yaml` comments must match what the YAML actually grants. Don't claim

No other project uses it yet

AnthropicCLAUDE.md

claude-for-legal / litigation-legal

anthropics/claude-for-legal/litigation-legal/CLAUDE.md

Matters with media / reputational risk | | CISO | [PLACEHOLDER] | | Data incidents, cyber litigation, regulator inquiries on security | | Board litigation / audit committee chair | [PLACEHOLDER] | | Critical matters, disclosure items | ### This counsel **Counsel:** [PLACEHOLDER] **Reports

No other project uses it yet

AnthropicCLAUDE.md

claude-for-legal / privacy-legal

anthropics/claude-for-legal/privacy-legal/CLAUDE.md

DSAR | [PLACEHOLDER] | | | | DPA negotiation | | | | | High-risk PIA | | | | | Regulator contact | — | [GC + you] | Always | | Suspected breach | — | [Security + GC] | Always | --- ## Seed documents | Doc | Location | Reviewed | Notes | |---|---|---|---| | Privacy policy | [PLACEHOLDER] | | | | DPA template | [PLACEHOLDER] | | | | Reference

No other project uses it yet

AnthropicCLAUDE.md

claude-for-legal / product-legal

anthropics/claude-for-legal/product-legal/CLAUDE.md

# Product Legal Practice Profile *Written by cold-start on [DATE]. If you see `[PLACEHOLDER

No other project uses it yet

highlightCLAUDE.md

highlight

highlight/highlight/CLAUDE.md

delve debugger on port 2345 - **Performance**: ClickHouse is used for high-volume analytics queries - **Security**: CORS is configured differently for public vs private endpoints

saulpwCLAUDE.md

visidata

saulpw/visidata/CLAUDE.md

clickable links) - Option and command reference format - Technical writing guidelines ### [dev/SECURITY.md](dev/SECURITY.md) - Handling a Security Report Use this when a vulnerability is reported privately, or a fix must stay embargoed

davidkimaiCLAUDE.md

Context-Engineering

davidkimai/Context-Engineering/CLAUDE.md

paths" }, /evaluate{ quality="Assess code quality and best practices", performance="Identify potential performance issues", security="Spot potential security concerns", maintainability="Evaluate long-term maintainability" }, /summarize{ purpose="Describe the code

bigbluebuttonCLAUDE.md

bigbluebutton

bigbluebutton/bigbluebutton/CLAUDE.md

Agent Instructions ## 🔒 Security Policy — Read Before Any PR If you are preparing a pull request that involves: - A bug that could be exploited - Authentication, authorization, or cryptography changes - Dependency updates

TelegramMessengerDeletes or force-pushesCLAUDE.md

Telegram-iOS

TelegramMessenger/Telegram-iOS/CLAUDE.md

sqlcipher_extra_init -DSQLITE_EXTRA_SHUTDOWN=sqlcipher_extra_shutdown -DSQLCIPHER_CRYPTO_CC" \ LDFLAGS="-framework Security -framework Foundation" make sqlite3.c sqlite3.h # also copies sqlite3ext.h and ext/session/sqlite3session.h to the root ``` (needs `/usr/bin/tclsh

No other project uses it yet

firezoneCLAUDE.md

firezone

firezone/firezone/CLAUDE.md

syntactically correct. - Focus on consistency and correctness. - Give extra special attention to any security-sensitive code, such as cryptographic operations, authentication logic, and access control mechanisms. ## Code contributions - Use [Conventional

Hiram-WongCLAUDE.md

zyfun

Hiram-Wong/zyfun/CLAUDE.md

typeName'); // get user data path getUserPath('typeName'); // get system data path ``` ### UI Design - TDesign ## Security - Never expose Node.js APIs directly to renderer; use `contextBridge` in preload - Validate all IPC inputs

securegoCLAUDE.md

gosec

securego/gosec/CLAUDE.md

gosec - Go Security Checker gosec is a Go static analysis tool that inspects Go source code for security vulnerabilities by scanning the Go AST and SSA form. ## Build & Test ```bash

No other project uses it yet

fissionCLAUDE.md

fission

fission/fission/CLAUDE.md

claude/resources/fission-*.md`, loaded on demand by the generic CI/dep/triage skills (`debug-ci`, `go-deps-security-sweep`, `bump-ci-tool-versions`, etc.). Start there when

lollipopkitReads credentialsCLAUDE.md

flutter_server_box / monitor

lollipopkit/flutter_server_box/monitor/CLAUDE.md

place a request becomes a `Caller` (JWT → account → role); `Caller::check(grant, state, secure)` is the one question. A JWT for a deleted account is 401. Grants are re-checked

No other project uses it yet

PydanticCLAUDE.md

monty

pydantic/monty/CLAUDE.md

model-checks` and `cargo test -p monty-fs` on Linux, macOS, and Windows ## Important Security Notice It's ABSOLUTELY CRITICAL that there's no way for code

digoalCLAUDE.md

blog

digoal/blog/CLAUDE.md

AI/ML integration with databases - "德说" (德哥's personal insights on tech, economics, philosophy) - Database security, HA, performance tuning - Database source code learning series (源码入门学习) ## Adding New Content 1. **New blog

bitsandbytes-foundationCLAUDE.md

bitsandbytes

bitsandbytes-foundation/bitsandbytes/CLAUDE.md

vLLM depend on bitsandbytes (for assessing downstream impact) 6. `agents/security_guide.md` — Trust model and security checklist (especially for external contributor PRs) For CUDA kernel changes, also read `agents/kbit_gemm_context.md`. The PR review

No other project uses it yet

NomicFoundationCLAUDE.md

hardhat

NomicFoundation/hardhat/CLAUDE.md

Scoped docs to read - If changing anything in ./scripts/, read ./scripts/README.md first. - Before any security review or audit, read ./THREAT_MODEL.md first and follow it. ## Renovate Config When editing `renovate.json`, validate

AnthropicCLAUDE.md

claude-agent-sdk-python

anthropics/claude-agent-sdk-python/CLAUDE.md

Type definitions - `_internal/` - Internal implementation details - `transport/subprocess_cli.py` - CLI subprocess management - `message_parser.py` - Message parsing logic # Security hardening for GitHub Actions Workflow jobs in this repository that call Claude run with three