CLAUDE.md examples from real projects

chaos-meshCLAUDE.md

chaos-mesh

chaos-mesh/chaos-mesh/CLAUDE.md

corresponding portions of `make check`. `make gosec-scan` is a separate, non-blocking security report and is not part of `make check`. ### Code generation ```bash make generate make proto make

leejetCLAUDE.md

stable-diffusion.cpp

leejet/stable-diffusion.cpp/CLAUDE.md

AGENTS.md` as the shared repository instructions. Do not duplicate contribution, style, PR, dependency, or security policy here; use `CONTRIBUTING.md` as the canonical source for those rules. Keep Claude-specific project

datahaven-xyzCLAUDE.md

datahaven

datahaven-xyz/datahaven/CLAUDE.md

with code in this repository. ## Project Overview DataHaven is an EVM-compatible Substrate blockchain secured by EigenLayer. It bridges Ethereum and Substrate ecosystems through: - EigenLayer AVS integration for security - Snowbridge

midudevCLAUDE.md

preguntas-entrevista-react

midudev/preguntas-entrevista-react/CLAUDE.md

make accessible". - `.claude/skills/accessibility/SKILL.md` - `.claude/skills/accessibility/references/WCAG.md` ## Best practices Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code

inventreeCLAUDE.md

InvenTree

inventree/InvenTree/CLAUDE.md

CONTRIBUTING.md](CONTRIBUTING.md) for codebase guidance. Security reports must follow the security policy in [SECURITY.md](docs/docs/SECURITY.md) and provide how they interact with the [threat model](docs/docs/concepts/threat_model.md). Do not open a pull

No other project uses it yet

Light-Heart-LabsReads credentialsCLAUDE.md

DreamServer

Light-Heart-Labs/DreamServer/CLAUDE.md

merges them with base + GPU overlay. Services bind to `127.0.0.1` by default for security. ### Dashboard API FastAPI app in `extensions/services/dashboard-api/` with modular routers (`routers/agents.py`, `features.py`, `privacy.py`, `setup.py`, `updates.py`, `workflows.py`). Uses

vastsaDeletes or force-pushesCLAUDE.md

PI-Desktop

vastsa/PI-Desktop/CLAUDE.md

disagree, follow `AGENTS.md`. Domain specs under `docs/spec/` remain authoritative for product behavior, protocols, and security boundaries. **Mirror sync:** This file condenses `AGENTS.md` for Claude Code. When policy changes, update both

deanpetersReads credentialsCLAUDE.md

Product-Manager-Skills

deanpeters/Product-Manager-Skills/CLAUDE.md

Growth Pyramid, applied through practitioner field material - ✅ **v0.79 Released (May 15, 2026):** Community contributions — security hardening, new meta-skill, bug fix - Added `skills/pm-skill-creator/` — interactive skill for guided skill design

No other project uses it yet

mnfstReads credentialsCLAUDE.md

manifest

mnfst/manifest/CLAUDE.md

Better Auth import) │ │ ├── database/ │ │ │ ├── database.module.ts # TypeORM PostgreSQL config │ │ │ ├── database-seeder.service.ts # Seeds demo data (users, agents, security events) │ │ │ ├── datasource.ts # CLI DataSource for migration commands │ │ │ ├── pricing-sync.service.ts # OpenRouter pricing data sync │ │ │ ├── ollama-sync.service.ts # Ollama model

h2oaiCLAUDE.md

h2o-3

h2oai/h2o-3/CLAUDE.md

when it's obvious (`bug`, `feature`, `docs`, `dependencies`, …). Skip if unclear. **CVE or security-related tasks must carry the `Security Vulnerability` label.** - **Relationships**: if a PR already exists

guardrails-aiCLAUDE.md

guardrails

guardrails-ai/guardrails/CLAUDE.md

IMPORTANT — always follow) This repo separates **compatibility** (what users are allowed to install) from **security** (what we actually ship and test against). The two live in different files and must

No other project uses it yet

AnthropicCLAUDE.md

defending-code-reference-harness

anthropics/defending-code-reference-harness/CLAUDE.md

Claude for Securing Source Code This repo has two halves: - **Interactive skills** (`.claude/skills/`) — read and write files in the repo (no target-code execution, except `/dnr-hunt` / `/dnr-respond`, which

enso-orgCLAUDE.md

enso

enso-org/enso/docs/CLAUDE.md

native image, dual-JVM, GraalVM upgrade, benchmarks, ydoc, logging. - `syntax/`, `semantics/`, `types/` — Language specification. - `security/`, `SECURITY.md` — Vulnerability reporting + policies. ## When to update - **New feature** → add to the subsystem

No other project uses it yet

TencentCLAUDE.md

AI-Infra-Guard

Tencent/AI-Infra-Guard/CLAUDE.md

rules organized by component - `data/eval/` — 13+ JSON jailbreak evaluation datasets - `data/mcp/` — YAML MCP security scan plugin rules ### Python Sub-projects These are invoked as subprocesses by Go agents, each

jokob-skCLAUDE.md

NetAlertX

jokob-sk/NetAlertX/CLAUDE.md

assumption that's wrong once two async steps are both in play. - **Bug and security fixes are test-first: write the failing test, run it and see it fail

kyegomezReads credentialsCLAUDE.md

swarms

kyegomez/swarms/CLAUDE.md

this many times max_loops=1, ) result = moa.run("What are the best practices for securing a Kubernetes cluster?") ``` **When to use:** High-stakes tasks where you want multiple independent perspectives

No other project uses it yet

Serial-StudioCLAUDE.md

Serial-Studio

Serial-Studio/Serial-Studio/CLAUDE.md

before handoff.** Re-read the diff: is this *what was asked, and only that*? - **Security-sensitive surfaces are decision-visible.** `app/src/Licensing/`, `core/Core/Licensing/`, `MachineID`, and the API Server auth/consent files

civitaiReads credentialsCLAUDE.md

civitai

civitai/civitai/CLAUDE.md

Adding an enum value: deploy the regenerated client **before** the migration and any backfill. ## Security — this repository is public Everything committed is permanently world-readable, including `docs/`, `claudedocs/`, `.claude

No other project uses it yet

TonyChen56CLAUDE.md

WeChatRobot

TonyChen56/WeChatRobot/CLAUDE.md

Architecture依赖**: Uses hardcoded offsets that change between versions - **稳定性**: 多年未维护，可能存在兼容性问题 - **仅供学习**: 不应用于生产环境或商业用途 ## Security Considerations ⚠️ **Warning**: This project involves: - DLL injection into another process - Function hooking and code interception - Reverse

enricorosReads credentialsCLAUDE.md

big-AGI

enricoros/big-AGI/CLAUDE.md

procedure alias in it resolves to bare `t.procedure` (the cloud layer lives on `dev`) #### Security Considerations - Server-side keys come from env vars only; client-held keys are user-supplied