CLAUDE.md examples from real projects

affaan-mCLAUDE.md

ECC

affaan-m/ECC/CLAUDE.md

/e2e, etc.) - **hooks/** - Trigger-based automations (session persistence, pre/post-tool hooks) - **rules/** - Always-follow guidelines (security, coding style, testing requirements) - **mcp-configs/** - MCP server configurations for external integrations - **scripts/** - Cross-platform

n8n-ioCLAUDE.md

n8n

n8n-io/n8n/.github/CLAUDE.md

visual) | | `ci-` | Continuous integration | | `util-` | Utilities (notifications) | | `build-` | Build processes | | `release-` | Release automation | | `sec-` | Security scanning | Reusable workflows: add `-reusable` or `-callable` suffix. ### Common Tasks **Add workflow:** Create in `workflows

AnthropicCLAUDE.md

claude-code

anthropics/claude-code/CLAUDE.md

CLAUDE.md Guidance for Claude Code and other coding agents working in this repository. ## Security hardening for GitHub Actions Workflow jobs in this repository that call Claude run with three protections

electronCLAUDE.md

electron

electron/electron/CLAUDE.md

Default policy: - **Bug fixes** — backport to all active release lines _except the oldest_ - **Security fixes** — backport to all active release lines _including the oldest_ - **Features (semver/minor) and breaking changes (semver/major

No other project uses it yet

browser-useCLAUDE.md

browser-use

browser-use/browser-use/CLAUDE.md

file management - **PopupsWatchdog**: Manages JavaScript dialogs and popups - **SecurityWatchdog**: Enforces domain restrictions and security policies - **DOMWatchdog**: Processes DOM snapshots, screenshots, and element highlighting - **AboutBlankWatchdog**: Handles empty page redirects ### CDP Integration

addyosmaniCLAUDE.md

agent-skills

addyosmani/agent-skills/CLAUDE.md

skills/ → Core skills (SKILL.md per directory) agents/ → Reusable agent personas (code-reviewer, test-engineer, security-auditor, web-performance-auditor) hooks/ → Session lifecycle hooks .claude/commands/ → Slash commands (/spec, /plan, /build, /test

ruvnetCLAUDE.md

claude-flow / v3

ruvnet/claude-flow/v3/CLAUDE.md

/shared/` | Shared types and utilities | | `@claude-flow/security` | `@claude-flow/security/` | Input validation, path security, CVE remediation | ## Code Quality - Files under 500 lines - No hardcoded secrets - Input validation at system

jgraphCLAUDE.md

drawio-desktop

jgraph/drawio-desktop/CLAUDE.md

submodule). It enables creating flowcharts, UML diagrams, and more, with a security-first design that isolates diagram data from the internet. **Repository:** https://github.com/jgraph/drawio-desktop **License:** GPL v3 only since

No other project uses it yet

zylon-aiCLAUDE.md

private-gpt / ui

zylon-ai/private-gpt/ui/CLAUDE.md

paths and document ownership. - Update the relevant docs in `docs/` whenever behavior, visuals, persistence, security posture, or API request/response handling changes. ## Claude-Specific Notes - Use the shared docs above

No other project uses it yet

Zie619CLAUDE.md

n8n-workflows

Zie619/n8n-workflows/CLAUDE.md

Update connections when adding/removing nodes 4. Test compatibility with n8n version requirements # # Key Considerations # # # Security - Workflow files may contain sensitive information in webhook URLs or API configurations - Credentials are typically

Imbad0202CLAUDE.md

academic-research-skills

Imbad0202/academic-research-skills/.claude/CLAUDE.md

with matrix-mirrored statuses and an asserted-status ceiling). - **Governance stated, security response proceduralized.** Root `GOVERNANCE.md` records decision authority, per-operator cross-model scope (error-detection control, not organizational independence

CherryHQCLAUDE.md

cherry-studio

CherryHQ/cherry-studio/CLAUDE.md

MUST READ**: [docs/references/ipc/README.md](docs/references/ipc/README.md) — paradigm boundary (RPC vs REST), schema/router/preload/facade layering, `IpcContext`, error model, security. Non-data command IPC (window/system/shell/notification/external/file) goes through **IpcApi** — the fifth subsystem alongside BootConfig/Cache/Preference/DataApi, RPC-over

No other project uses it yet

abhigyanpatwariCLAUDE.md

GitNexus

abhigyanpatwari/GitNexus/CLAUDE.md

imports, or execution flow.** Graph first; text search only for empty/`UNKNOWN`/literals. - For security review, `explain({target: "fileOrSymbol"})` lists taint findings (source→sink flows; needs `analyze --pdg`). - For control/data

No other project uses it yet

luongnv89CLAUDE.md

claude-howto / uk

luongnv89/claude-howto/uk/CLAUDE.md

Якість коду ```bash # Lint and format Python code ruff check scripts/ ruff format scripts/ # Security scan bandit -c scripts/pyproject.toml -r scripts/ --exclude scripts/tests/ # Type checking mypy scripts/ --ignore-missing-imports

No other project uses it yet

luongnv89CLAUDE.md

claude-howto / vi

luongnv89/claude-howto/vi/CLAUDE.md

Lượng Code ```bash # Lint và format Python code ruff check scripts/ ruff format scripts/ # Security scan bandit -c scripts/pyproject.toml -r scripts/ --exclude scripts/tests/ # Type checking mypy scripts/ --ignore-missing-imports

No other project uses it yet

ccxtCLAUDE.md

ccxt

ccxt/ccxt/CLAUDE.md

# CCXT — Repository Guide for Contributors and AI Agents CCXT is a unified cryptocurrency trading

No other project uses it yet

AnthropicCLAUDE.md

financial-services

anthropics/financial-services/CLAUDE.md

named agent) │ └── / │ ├── agent.yaml # system + skills → ../../plugins/agent-plugins/ /... │ ├── subagents/*.yaml # depth-1 leaf workers │ ├── steering-examples.json │ └── README.md # security tier + handoff notes ├── claude-for-msft-365-install/ # admin tooling for the Microsoft

remoteintechCLAUDE.md

remote-jobs

remoteintech/remote-jobs/CLAUDE.md

sections. Posts a PR comment with results and blocks merge on errors. - **CodeQL** (`.github/workflows/codeql-analysis.yml`): Security scanning on push/PR and weekly schedule. ## Branch Protection The `main` branch has protection rules: - Requires

No other project uses it yet

filebrowserCLAUDE.md

filebrowser

filebrowser/filebrowser/.claude/CLAUDE.md

test ./...`. Reuse existing test harnesses (e.g. `signToken`, `scopedUserStorage`, `handle`, `customFSUser`, `mockUserStore`). --- # Handling security advisories Use this playbook when asked to triage, verify, fix, or manage GitHub security advisories. All advisory

nicolargoCLAUDE.md

glances

nicolargo/glances/CLAUDE.md

strict confinement blocks host file access at the open stage, not the read stage. ### Security Glances runs unauthenticated by default — this is intentional and documented. Most users deploy on private

No other project uses it yet