Home / hermeticormus / libresecops-claude-code · GitHub

CLAUDE.md@templatesA

CLAUDE.md@templates from hermeticormus/libresecops-claude-code is a CLAUDE.md file: the standing instructions Claude Code reads in that repo.

Install it, pinned
mdr add hermeticormus/libresecops-claude-code/templates/CLAUDE.md@git:20260225.4a0a620

Pins git:20260225.4a0a620 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 14 of 14 checks passed
Kind
CLAUDE.md file
Repository
hermeticormus/libresecops-claude-code
Path
templates/CLAUDE.md
Versions recorded
1
Latest version
git:20260225.4a0a620, committed Feb 25, 2026
Size
15,949 bytes
Repository stars
4
License
MIT

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Security Configuration -- CLAUDE.md Template

> Paste this into your project's `CLAUDE.md` file and customize each section for your application.
> Remove sections that do not apply. Fill in every section you keep -- incomplete configuration
> gives incomplete protection.

---

## Project Security Profile

- **Application Name:** [your-app-name]
- **Risk Classification:** [Critical / High / Medium / Low]
- **Data Sensitivity:** [PII / PHI / PCI / Financial / Public / Internal]
- **Deployment Environment:** [Production / Staging / Development]
- **Internet Facing:** [Yes / No]
- **Authentication Required:** [Yes / No]

---

## Secure Coding Standards

### Input Validation

All external input must be validated before processing. This applies to HTTP request parameters,
headers, file uploads, database query results from untrusted sources, and data from third-party APIs.

- **Allowlist over denylist:** Define what is permitted, reject everything else.
- **Type enforcement:** Validate data types, lengths, ranges, and formats at the boundary.
- **Parameterized queries:** Never concatenate user input into SQL, LDAP, or OS commands.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add hermeticormus/libresecops-claude-code/templates/CLAUDE.md@sha256:c20b1ddd3d24a885

The line at the top of this page pins the label git:20260225.4a0a620, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_ffoon2dobssesln5.svg)](https://markdownregistry.com/a/art_ffoon2dobssesln5)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Feb 25, 2026.

versioncommittedcommitsizeaudit
git:20260225.4a0a620 latest2026-02-25 4a0a620 15,949 BA view

Audit of the latest version

A  14 of 14 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Size between 200 bytes and 200 KB (15949 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

hermeticormus/libresecops-claude-code · 4 stars · license MIT · pushed 2026-10-04 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_ffoon2dobssesln5
GET https://markdownregistry.com/api/v1/resolve?ref=hermeticormus/libresecops-claude-code/templates/CLAUDE.md
GET https://markdownregistry.com/api/v1/blob/c20b1ddd3d24a885638932be6474727d0c22f80d38bed89c5a23054c2ec1a8eb

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: what a CLAUDE.md file is · keeping AGENTS.md and CLAUDE.md in sync · which agent file does what.

More from hermeticormus/libresecops-claude-code

verify-libre-secops SKILL.md skill
hermeticormus/libresecops-claude-code · .grok/skills/verify-libre-secops/SKILL.md · Install the LibreSecOps-Claude-Code plugin pack the way a user does, into a clean Claude Code config and a clean Grok…
git:20261004.3d43c2c · audit A · 4 stars
api-auth-patterns SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/api-security-testing/skills/api-auth-patterns/SKILL.md · Secure implementation patterns for API authentication and authorization: OAuth 2.0 flows, JWT best practices, API key…
git:20260930.71a2663 · audit A · 4 stars
detection-engineering SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/blue-team-detection/skills/detection-engineering/SKILL.md · Detection engineering reference: the detection lifecycle and quality metrics, Sigma rule syntax and modifiers, YARA…
git:20260930.71a2663 · audit A · 4 stars
threat-hunting-methodology SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/blue-team-detection/skills/threat-hunting-methodology/SKILL.md · Hypothesis-driven threat hunting framework with hunt categories, required data sources, worked hunts for DNS tunneling…
git:20260930.71a2663 · audit A · 4 stars
recon-methodology SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/bug-bounty-methodology/skills/recon-methodology/SKILL.md · Reconnaissance methodology for authorized bug bounty programs: passive recon (certificate transparency, search engine…
git:20260930.71a2663 · audit A · 4 stars
vuln-report-writing SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/bug-bounty-methodology/skills/vuln-report-writing/SKILL.md · Guide to vulnerability reports that get accepted and triaged: title writing, CVSS v3.1 scoring, reproduction steps…
git:20260930.71a2663 · audit A · 4 stars
aws-iam-patterns SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/cloud-security-aws/skills/aws-iam-patterns/SKILL.md · AWS IAM reference: policy evaluation logic, policy types, least-privilege Lambda roles, permission boundaries, SCP…
git:20260930.71a2663 · audit A · 4 stars
aws-s3-security SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/cloud-security-aws/skills/aws-s3-security/SKILL.md · S3 security reference: access control layers, encryption models, a secure bucket baseline in Terraform, TLS-only bucket…
git:20260930.71a2663 · audit A · 4 stars
azure-identity-patterns SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/cloud-security-azure/skills/azure-identity-patterns/SKILL.md · Entra ID security patterns: Conditional Access baseline policies, managed identities, Privileged Identity Management…
git:20260930.71a2663 · audit A · 4 stars
gcp-iam-patterns SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/cloud-security-gcp/skills/gcp-iam-patterns/SKILL.md · GCP IAM reference: the permission model, role types, deny policies, least-privilege service accounts, Workload Identity…
git:20260930.71a2663 · audit A · 4 stars
gdpr-requirements SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/compliance-frameworks/skills/gdpr-requirements/SKILL.md · GDPR reference for technology teams: key definitions, Article 5 principles, lawful bases, data subject rights, data…
git:20260930.71a2663 · audit A · 4 stars
soc2-controls SKILL.md skill
hermeticormus/libresecops-claude-code · plugins/compliance-frameworks/skills/soc2-controls/SKILL.md · SOC 2 Type II reference: the Trust Service Criteria, Common Criteria controls, evidence requirements, a readiness…
git:20260930.71a2663 · audit A · 4 stars

Every file in hermeticormus/libresecops-claude-code

Other files named CLAUDE.md@templates

CLAUDE.md@templates CLAUDE.md file
modoojunko/awesome-novel-agent · templates/CLAUDE.md
git:20260828.0827fb7 · audit A · 832 stars
CLAUDE.md@templates CLAUDE.md file
hermeticormus/libreuiux-claude-code · templates/CLAUDE.md
git:20251115.d08a52f · audit A · 118 stars
CLAUDE.md@templates CLAUDE.md file
sneg55/agent-starter · templates/CLAUDE.md
git:20260901.2b04e99 · audit A · 76 stars
CLAUDE.md@templates CLAUDE.md file
crisandrews/clawcode · templates/CLAUDE.md
git:20260913.75c1cc1 · audit A · 63 stars
CLAUDE.md@templates CLAUDE.md file
radekamirko/c.r.i.s.p · templates/CLAUDE.md
git:20260601.649f845 · audit A · 52 stars
CLAUDE.md@templates CLAUDE.md file
hermeticormus/libreembed-claude-code · templates/CLAUDE.md
git:20260225.a4aeb64 · audit A · 51 stars
CLAUDE.md@templates CLAUDE.md file
realproject7/quadwork · templates/CLAUDE.md
git:20260903.e2334ff · audit A · 32 stars
CLAUDE.md@templates CLAUDE.md file
chrono-meta/forge-harness · templates/CLAUDE.md
git:20260810.69d1ce6 · audit A · 30 stars

Browse by kind, by grade A, or by owner.