CLAUDE.mdA

CLAUDE.md from ch015/code-pentester is a CLAUDE.md file: the standing instructions Claude Code reads in that repo.

Install it, pinned
mdr add ch015/code-pentester/CLAUDE.md@git:20261014.04e275e

Pins git:20261014.04e275e in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 14 of 14 checks passed
Kind
CLAUDE.md file
Repository
ch015/code-pentester
Path
CLAUDE.md
Versions recorded
4
Latest version
git:20261014.04e275e, committed Oct 14, 2026
First version recorded
May 7, 2026
Size
1,886 bytes
Repository stars
4
License
MIT

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# CLAUDE.md — code-pentester

## Reasoning Discipline

ch015 자체가 모든 Finding에 *Observed Evidence (file:line)* 를 요구한다. 같은 원칙을 어시스턴트의 ch015 관련 답변에도 적용한다.

1. **Verify before declaring absence.** "X is not in ch015" requires `grep -r X skills/ agents/ knowledge-base/ templates/`. Distinguish "verified absent" from "haven't seen yet."

2. **Recommend ONE option.** 추천이 사실상 하나면 하나만 제시. C × E처럼 같은 답을 두 번 묶지 말 것. 비교표는 *실제 trade-off가 의미 있을 때만*.

3. **Verify pushback with same rigor.** 사용자가 반박하면 grep/read로 그 주장도 검증한 *후* 동의/반박. 반사적 동의는 sycophancy.

4. **Cite file:line.** 무거운 결론에 file:line 인용 없으면 *가설*이지 *사실*이 아님. 인용 없는 단정 금지.

5. **Broad-scope = 2-pass sampling.** "How does ch015 do X" 류 질문은 SKILL + agent + template + knowledge 레이어를 모두 본다. 첫 grep은 표본, 결론 직전에 확인 패스 한 번 더.

## Project Operational Rules

- **No direct push to `main`.** 로컬 커밋은 OK, push/PR은 명시 요청 시에만.
- **`reports/` is gitignored.** 벤치마크 출력물은 로컬 전용 산출물.
- **Sub-agents inherit parent plan mode.** 부모(어시스턴트)가 plan mode면 자식 에이전트도 plan mode에 갇힘. 자식이 실행 안 되고 플래닝만 반복하면 부모가 ExitPlanMode 먼저 호출하고 재실행.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add ch015/code-pentester/CLAUDE.md@sha256:970cb7178ca0cfc9

The line at the top of this page pins the label git:20261014.04e275e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_eklzpgox22fryr3b.svg)](https://markdownregistry.com/a/art_eklzpgox22fryr3b)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 4 versions of this file, between May 7, 2026 and Oct 14, 2026, about one every 53 days.

versioncommittedcommitsizeaudit
git:20261014.04e275e latest2026-10-14 04e275e 1,886 BA view · diff
git:20260930.b4f3d4f2026-09-30 b4f3d4f 1,882 BA view · diff
git:20260921.3086d032026-09-21 3086d03 1,883 BA view · diff
git:20260507.bc0c8482026-05-07 bc0c848 1,756 BA view

Audit of the latest version

A  14 of 14 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Size between 200 bytes and 200 KB (1886 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

ch015/code-pentester · 4 stars · license MIT · pushed 2026-10-19 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_eklzpgox22fryr3b
GET https://markdownregistry.com/api/v1/resolve?ref=ch015/code-pentester/CLAUDE.md
GET https://markdownregistry.com/api/v1/blob/970cb7178ca0cfc9d33bf2246e75d4094faa22c945e3d8fee6459db86dba6bf6

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: what a CLAUDE.md file is · keeping AGENTS.md and CLAUDE.md in sync · which agent file does what.

More from ch015/code-pentester

ch015 SKILL.md skill
ch015/code-pentester · skills/ch015/SKILL.md · Run CH015 AI Security Firm workflows for security audits, vulnerability assessment, adversarial verification…
git:20261014.04e275e · audit A · 4 stars
ch015-pentest SKILL.md skill
ch015/code-pentester · skills/ch015/offsec/pentest/SKILL.md · Run CH015 penetration testing workflows for attacker-minded source-code review, exploit scenarios, POC generation…
git:20261014.04e275e · audit A · 4 stars
ch015-redteam SKILL.md skill
ch015/code-pentester · skills/ch015/offsec/redteam/SKILL.md · Run CH015 red team infrastructure configuration security review workflows for IaC, CI/CD, containers, Kubernetes, cloud…
git:20260908.452d6f7 · audit A · 4 stars
ch015-va SKILL.md skill
ch015/code-pentester · skills/ch015/offsec/va/SKILL.md · Run CH015 vulnerability assessment workflows for source-code security architecture review, 8-dimension analysis…
git:20261016.323d2e0 · audit A · 4 stars
ch015-verifier SKILL.md skill
ch015/code-pentester · skills/ch015/offsec/verifier/SKILL.md · Run CH015 adversarial verification workflows to independently validate security reports, recheck file-line evidence…
git:20261014.04e275e · audit A · 4 stars
ch015-feedback SKILL.md skill
ch015/code-pentester · skills/ch015/review/feedback/SKILL.md · Run CH015 security design review workflows for PRDs and specs to produce security opinions or review findings mapped to…
git:20260908.452d6f7 · audit A · 4 stars

Every file in ch015/code-pentester

Other files named CLAUDE.md

CLAUDE.md CLAUDE.md file
affaan-m/ecc · CLAUDE.md
git:20261020.9471ef4 · audit A · 299,696 stars
CLAUDE.md CLAUDE.md file
firecrawl/firecrawl · CLAUDE.md
git:20261008.5a75dca · audit A · 199,595 stars
CLAUDE.md CLAUDE.md file
garrytan/gstack · CLAUDE.md
git:20261107.ef99eb5 · audit A · 140,694 stars
CLAUDE.md CLAUDE.md file
juliusbrussee/caveman · CLAUDE.md
git:20261106.af560e1 · audit B · 118,366 stars
CLAUDE.md CLAUDE.md file
addyosmani/agent-skills · CLAUDE.md
git:20260720.8fd2081 · audit A · 113,383 stars
CLAUDE.md CLAUDE.md file
nexu-io/open-design · CLAUDE.md
git:20260430.9b57c22 · audit B · 106,541 stars
CLAUDE.md CLAUDE.md file
pbakaus/impeccable · CLAUDE.md
git:20261105.71dfd50 · audit A · 106,186 stars
CLAUDE.md CLAUDE.md file
debpalash/voicestudio · CLAUDE.md
git:20261104.c2998f6 · audit A · 102,675 stars

Browse by kind, by grade A, or by owner.