CLAUDE.md examples from real projects

joemccannReads credentialsCLAUDE.md

dillinger

joemccann/dillinger/CLAUDE.md

setError('Failed to fetch repos') } finally { setLoading(false) } }, []) return { repos, loading, error, fetchRepos } } ``` ## Security Guidelines ### XSS Prevention - **Always** sanitize user-generated HTML with DOMPurify before rendering - Markdown preview uses `dangerouslySetInnerHTML

EstrellaXDCLAUDE.md

Auto_Bangumi

EstrellaXD/Auto_Bangumi/CLAUDE.md

notification/ # Notification plugins (Telegram, Bark, etc.) │ ├── conf/ # Configuration management, settings │ ├── network/ # HTTP client utilities │ └── security/ # JWT authentication webui/src/ ├── api/ # Axios API client functions ├── components/ # Vue components (basic/, layout/, setting/) ├── pages

samberCLAUDE.md

awesome-prometheus-alerts

samber/awesome-prometheus-alerts/CLAUDE.md

Kubernetes, Nomad, Consul, Etcd, OpenStack), CI/CD (Jenkins, ArgoCD, FluxCD, GitLab CI, Spinnaker), network and security (SSL/TLS, CoreDNS, Vault, Cloudflare, Cilium, eBPF), storage (Ceph, ZFS, OpenEBS, Minio), cloud providers (AWS, Azure

xixu-meCLAUDE.md

xget

xixu-me/xget/CLAUDE.md

reverse proxy that transforms incoming requests to match various platform APIs while adding security headers, caching, retry logic, and performance monitoring. ## Development Commands ### Core Commands ```bash # Start development server (Cloudflare

six2dezReads credentialsCLAUDE.md

reconftw

six2dez/reconftw/CLAUDE.md

comprehensive bash-based reconnaissance automation framework used by bug bounty hunters, penetration testers, and security researchers. It orchestrates 70+ external security tools (Go, Python, Rust) across subdomain enumeration, web probing

nullclawCLAUDE.md

nullclaw

nullclaw/nullclaw/CLAUDE.md

http_util` 2. **Agent**: `agent`, `session`, `providers`, `memory` 3. **Networking**: `gateway`, `channels` 4. **Extensions**: `security`, `cron`, `health`, `tools`, `identity`, `cost`, `observability`, `heartbeat`, `runtime`, `mcp`, `subagent`, `auth`, `multimodal`, `agent_routing

chaos-meshCLAUDE.md

chaos-mesh

chaos-mesh/chaos-mesh/CLAUDE.md

corresponding portions of `make check`. `make gosec-scan` is a separate, non-blocking security report and is not part of `make check`. ### Code generation ```bash make generate make proto make

No other project uses it yet

datahaven-xyzCLAUDE.md

datahaven

datahaven-xyz/datahaven/CLAUDE.md

with code in this repository. ## Project Overview DataHaven is an EVM-compatible Substrate blockchain secured by EigenLayer. It bridges Ethereum and Substrate ecosystems through: - EigenLayer AVS integration for security - Snowbridge

leejetCLAUDE.md

stable-diffusion.cpp

leejet/stable-diffusion.cpp/CLAUDE.md

AGENTS.md` as the shared repository instructions. Do not duplicate contribution, style, PR, dependency, or security policy here; use `CONTRIBUTING.md` as the canonical source for those rules. Keep Claude-specific project

midudevCLAUDE.md

preguntas-entrevista-react

midudev/preguntas-entrevista-react/CLAUDE.md

make accessible". - `.claude/skills/accessibility/SKILL.md` - `.claude/skills/accessibility/references/WCAG.md` ## Best practices Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code

inventreeCLAUDE.md

InvenTree

inventree/InvenTree/CLAUDE.md

CONTRIBUTING.md](CONTRIBUTING.md) for codebase guidance. Security reports must follow the security policy in [SECURITY.md](docs/docs/SECURITY.md) and provide how they interact with the [threat model](docs/docs/concepts/threat_model.md). Do not open a pull

No other project uses it yet

OsmanticReads credentialsCLAUDE.md

ODS

Osmantic/ODS/CLAUDE.md

merges them with base + GPU overlay. Services bind to `127.0.0.1` by default for security. ### Dashboard API FastAPI app in `extensions/services/dashboard-api/` with modular routers (`routers/agents.py`, `features.py`, `privacy.py`, `setup.py`, `updates.py`, `workflows.py`). Uses

deanpetersReads credentialsCLAUDE.md

Product-Manager-Skills

deanpeters/Product-Manager-Skills/CLAUDE.md

Growth Pyramid, applied through practitioner field material - ✅ **v0.79 Released (May 15, 2026):** Community contributions — security hardening, new meta-skill, bug fix - Added `skills/pm-skill-creator/` — interactive skill for guided skill design

No other project uses it yet

mnfstReads credentialsCLAUDE.md

manifest

mnfst/manifest/CLAUDE.md

Better Auth import) │ │ ├── database/ │ │ │ ├── database.module.ts # TypeORM PostgreSQL config │ │ │ ├── database-seeder.service.ts # Seeds demo data (users, agents, security events) │ │ │ ├── datasource.ts # CLI DataSource for migration commands │ │ │ ├── pricing-sync.service.ts # OpenRouter pricing data sync │ │ │ ├── ollama-sync.service.ts # Ollama model

h2oaiCLAUDE.md

h2o-3

h2oai/h2o-3/CLAUDE.md

when it's obvious (`bug`, `feature`, `docs`, `dependencies`, …). Skip if unclear. **CVE or security-related tasks must carry the `Security Vulnerability` label.** - **Relationships**: if a PR already exists

guardrails-aiCLAUDE.md

guardrails

guardrails-ai/guardrails/CLAUDE.md

IMPORTANT — always follow) This repo separates **compatibility** (what users are allowed to install) from **security** (what we actually ship and test against). The two live in different files and must

No other project uses it yet

AnthropicCLAUDE.md

defending-code-reference-harness

anthropics/defending-code-reference-harness/CLAUDE.md

Claude for Securing Source Code This repo has two halves: - **Interactive skills** (`.claude/skills/`) — read and write files in the repo (no target-code execution, except `/dnr-hunt` / `/dnr-respond`, which

No other project uses it yet

enso-orgCLAUDE.md

enso

enso-org/enso/docs/CLAUDE.md

native image, dual-JVM, GraalVM upgrade, benchmarks, ydoc, logging. - `syntax/`, `semantics/`, `types/` — Language specification. - `security/`, `SECURITY.md` — Vulnerability reporting + policies. ## When to update - **New feature** → add to the subsystem

No other project uses it yet

kyegomezReads credentialsCLAUDE.md

swarms

kyegomez/swarms/CLAUDE.md

this many times max_loops=1, ) result = moa.run("What are the best practices for securing a Kubernetes cluster?") ``` **When to use:** High-stakes tasks where you want multiple independent perspectives

civitaiReads credentialsCLAUDE.md

civitai

civitai/civitai/CLAUDE.md

Adding an enum value: deploy the regenerated client **before** the migration and any backfill. ## Security — this repository is public Everything committed is permanently world-readable, including `docs/`, `claudedocs/`, `.claude

No other project uses it yet