CLAUDE.md@webappA

CLAUDE.md@webapp from openlatch/saferskills is a CLAUDE.md file: the standing instructions Claude Code reads in that repo.

Install it, pinned
mdr add openlatch/saferskills/webapp/CLAUDE.md@git:20261016.3e11a36

Pins git:20261016.3e11a36 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 14 of 14 checks passed
Kind
CLAUDE.md file
Repository
openlatch/saferskills
Path
webapp/CLAUDE.md
Versions recorded
5
Latest version
git:20261016.3e11a36, committed Oct 16, 2026
First version recorded
Jun 12, 2026
Size
4,426 bytes
Repository stars
8
License
Apache-2.0

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# CLAUDE.md — webapp/

SaferSkills public website. Astro 6 (output: server) + React 19 islands + Tailwind v4 via the `@tailwindcss/vite` plugin.

## Hard rules

1. **Routes opt INTO SSG.** `astro.config.mjs` sets `output: 'server'` with the `@astrojs/node` adapter. Static pages add `export const prerender = true` at the top of their frontmatter (homepage, about, methodology, /docs, /404). Dynamic pages stay SSR — catalog (URL-driven filters), `/scans/[id]`, `/items/[slug]`, badge/OG endpoints, and the `/api/[...path].ts` same-origin reverse proxy (forwards `/api/*` to the runtime `API_ORIGIN` backend; see `.claude/rules/frontend-patterns.md` § Same-origin API proxy).
2. **Style entry is `webapp/src/styles/global.css`.** That file `@import`s `@ui/styles/globals.css` (Tailwind + tokens + page-vocabulary CSS + fonts + typography utilities) → `./reset.css` (webapp-specific base resets). The page-vocabulary CSS (`.btn`, `.chip`, `.page-head`, `.ridge-*`, etc.) lives in `ui/styles/components.css` so Ladle stories render with the same chrome the webapp ships.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add openlatch/saferskills/webapp/CLAUDE.md@sha256:a25d52e20d27c9ba

The line at the top of this page pins the label git:20261016.3e11a36, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_coieivazymjoyoef.svg)](https://markdownregistry.com/a/art_coieivazymjoyoef)

1 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 5 versions of this file, between Jun 12, 2026 and Oct 16, 2026, about one every 32 days.

versioncommittedcommitsizeaudit
git:20261016.3e11a36 latest2026-10-16 3e11a36 4,426 BA view · diff
git:20260619.275eab32026-06-19 275eab3 4,415 BA view · diff
git:20260618.10a07ef2026-06-18 10a07ef 4,573 BA view · diff
git:20260616.3e02dc62026-06-16 3e02dc6 4,279 BA view · diff
git:20260612.f44d08d2026-06-12 f44d08d 4,143 BA view

Audit of the latest version

A  14 of 14 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Size between 200 bytes and 200 KB (4426 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

openlatch/saferskills · 8 stars · license Apache-2.0 · pushed 2026-10-17 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_coieivazymjoyoef
GET https://markdownregistry.com/api/v1/resolve?ref=openlatch/saferskills/webapp/CLAUDE.md
GET https://markdownregistry.com/api/v1/blob/a25d52e20d27c9ba8e7d790a2c4783d981eec5c25fd834a2eae783cc12e2af88

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: what a CLAUDE.md file is · keeping AGENTS.md and CLAUDE.md in sync · which agent file does what.

More from openlatch/saferskills

CLAUDE.md CLAUDE.md file
openlatch/saferskills · CLAUDE.md
git:20261016.3e11a36 · audit A · 8 stars
CLAUDE.md@services/api CLAUDE.md file
openlatch/saferskills · services/api/CLAUDE.md
git:20261016.3e11a36 · audit A · 8 stars
saferskills SKILL.md skill
openlatch/saferskills · skills/saferskills/SKILL.md · Use SaferSkills to find, evaluate, and safely install AI agent capabilities (skills, MCP servers, hooks, plugins…
git:20260619.5d4b88b · audit A · 8 stars
CLAUDE.md@tools/data-seed CLAUDE.md file
openlatch/saferskills · tools/data-seed/CLAUDE.md
git:20260619.275eab3 · audit A · 8 stars
CLAUDE.md@tools/e2e CLAUDE.md file
openlatch/saferskills · tools/e2e/CLAUDE.md
git:20260525.87fda2b · audit A · 8 stars
CLAUDE.md@tools/saferskills-admin CLAUDE.md file
openlatch/saferskills · tools/saferskills-admin/CLAUDE.md
git:20260619.275eab3 · audit A · 8 stars
CLAUDE.md@ui CLAUDE.md file
openlatch/saferskills · ui/CLAUDE.md
git:20260601.260a64d · audit A · 8 stars

Every file in openlatch/saferskills

Other files named CLAUDE.md@webapp

CLAUDE.md@webapp CLAUDE.md file
tomosia-vietnam/webapp-evidence · webapp/CLAUDE.md
git:20260924.154d6f7 · audit A · 20 stars
CLAUDE.md@webapp CLAUDE.md file
bearlike/grove · webapp/CLAUDE.md
git:20261002.ab7241f · audit B · 9 stars

Browse by kind, by grade A, or by owner.