CLAUDE.md examples from real projects

TencentCLAUDE.md

AI-Infra-Guard

Tencent/AI-Infra-Guard/CLAUDE.md

rules organized by component - `data/eval/` — 13+ JSON jailbreak evaluation datasets - `data/mcp/` — YAML MCP security scan plugin rules ### Python Sub-projects These are invoked as subprocesses by Go agents, each

No other project uses it yet

TonyChen56CLAUDE.md

WeChatRobot

TonyChen56/WeChatRobot/CLAUDE.md

Architecture依赖**: Uses hardcoded offsets that change between versions - **稳定性**: 多年未维护，可能存在兼容性问题 - **仅供学习**: 不应用于生产环境或商业用途 ## Security Considerations ⚠️ **Warning**: This project involves: - DLL injection into another process - Function hooking and code interception - Reverse

enricorosReads credentialsCLAUDE.md

big-AGI

enricoros/big-AGI/CLAUDE.md

procedure alias in it resolves to bare `t.procedure` (the cloud layer lives on `dev`) #### Security Considerations - Server-side keys come from env vars only; client-held keys are user-supplied

DimillianCLAUDE.md

IceCubesApp

Dimillian/IceCubesApp/CLAUDE.md

timeline, mentions, and accounts ### Important Implementation Details - **Multi-account**: Managed through `AppAccountsManager` with secure storage - **Push Notifications**: Custom proxy server implementation for privacy - **Theme System**: Extensive customization with

fleetdmCLAUDE.md

fleet

fleetdm/fleet/.claude/CLAUDE.md

this repository. ## About Fleet Fleet is an open-source platform for IT and security teams: device management (MDM), vulnerability reporting, osquery fleet management, and security monitoring. Go backend, React/TypeScript frontend

chillzhuangCLAUDE.md

SpringBlade

chillzhuang/SpringBlade/CLAUDE.md

Cloud Gateway（WebFlux） | | ORM | MyBatis-Plus + dynamic-datasource-spring-boot4-starter | | 安全 | blade-core-secure（JWT + 可选 AES 加密 + SM2 国密登录） | | 缓存 | BladeRedis（Protostuff 序列化，响应式 Gateway 侧用 Reactive Redis

mermaid-jsReads credentialsCLAUDE.md

mermaid-live-editor

mermaid-js/mermaid-live-editor/CLAUDE.md

Both edit either the diagram code or the mermaid config JSON depending on `editorMode`. ### Security States loaded from URLs pass through `sanitizeConfig` (state.svelte.ts), which detects unsafe mermaid config (XSS vectors

j3ssieReads credentialsCLAUDE.md

osmedeus

j3ssie/osmedeus/CLAUDE.md

TOKEN); DRY_RUN=1 to preview ``` ## Architecture Overview Osmedeus is a workflow engine for security automation. It executes YAML-defined workflows with support for multiple execution environments. ### Layered Architecture ``` CLI/API

airweave-aiCLAUDE.md

airweave

airweave-ai/airweave/CLAUDE.md

path (just `host.com/{endpoint}`) - Use logger from `ctx` (API) or `sync_context` (during sync) - Security: never use `random.*` for security values (ruff S311); use `secrets` module ### Frontend (TypeScript) - TailwindCSS with

czlonkowskiCLAUDE.md

n8n-skills

czlonkowski/n8n-skills/CLAUDE.md

user first) - Secret-free/domain-free templates in `assets/`; fresh secrets generated on the box; secure defaults; DNS/ports preflight; Day-2 update/backup/restore - Python Code nodes need task runners in external mode

No other project uses it yet

op7418CLAUDE.md

CodePilot

op7418/CodePilot/CLAUDE.md

test.ts` - fail-closed：分类器出错 / 空暂存集 / 非 `docs` 判定一律走全量门禁（防「前置失败被静默放行」回归） 高风险 docs（release / security / runtime / provider / permission / DB schema）即便走 docs 快路，也应手动跑 `npm run test`（必要时 build / smoke

Arthur-FicialCLAUDE.md

apfel

Arthur-Ficial/apfel/CLAUDE.md

Proper error types. Real token counts. - **Swift 6 strict concurrency.** No data races. - **Usable security.** Secure defaults that don't get in the way. - **TDD always, red-to-green

aptos-labsCLAUDE.md

aptos-core

aptos-labs/aptos-core/CLAUDE.md

definitions used everywhere - `aptos-vm` - VM integration and transaction execution - `aptos-crypto` - Cryptographic primitives (security-critical) - `aptos-api-types` - API request/response types ## Safety-Critical Code These directories require extra care

Provenance-EmuReads credentialsCLAUDE.md

Provenance

Provenance-Emu/Provenance/CLAUDE.md

# CLAUDE.md This file provides guidance to Claude Code (claude.ai/code) when working with code

cryticCLAUDE.md

slither

crytic/slither/CLAUDE.md

slither/ ├── analyses/ # Data dependency, dominators, control flow ├── core/ # Core classes: SlitherCore, Contract, Function ├── detectors/ # Security checks (subclass AbstractDetector) ├── printers/ # Output formatters (subclass AbstractPrinter) ├── slithir/ # Intermediate representation for analysis ├── solc_parsing

No other project uses it yet

androguardCLAUDE.md

androguard

androguard/androguard/CLAUDE.md

large `workspace/output/` trees. - Do not invent APIs; read `androguard/application.py` and `androguard/cli/main.py` when unsure. - Authorized security analysis only; do not help with malware distribution or unauthorized access

No other project uses it yet

rundeckCLAUDE.md

rundeck

rundeck/rundeck/CLAUDE.md

Groovy auto-generates getters/setters — do NOT implement them explicitly unless custom logic is needed. ### Security Avoid command injection, XSS, SQL injection. Use parameterized queries and escape user input. ### Simplicity Only

No other project uses it yet

FlorianBruniauxCLAUDE.md

claude-code-ultimate-guide

FlorianBruniaux/claude-code-ultimate-guide/CLAUDE.md

printable summary ├── cowork.md # Cowork redirect page ├── core/ # Architecture, methodologies, releases, known-issues, visual-reference ├── security/ # security-hardening, sandbox-isolation, sandbox-native, production-safety, data-privacy ├── ecosystem/ # ai-ecosystem, mcp-servers

rivet-devDeletes or force-pushesCLAUDE.md

engine

rivet-dev/engine/CLAUDE.md

actor-local Unix socket as a trusted, application-local peer, not an adversarial security boundary. Socket ownership, permissions, and per-generation lifetime provide isolation. Continue enforcing framing, resource bounds, cancellation

rivet-devCLAUDE.md

engine / rivetkit-typescript

rivet-dev/engine/rivetkit-typescript/CLAUDE.md

date in the same change whenever dynamic actor architecture, lifecycle, bridge payloads, security behavior, or temporary compatibility paths change