AGENTS.md examples from real projects

MicrosoftDeletes or force-pushesAGENTS.md

Data-Science-For-Beginners / pcm

microsoft/Data-Science-For-Beginners/translations/pcm/AGENTS.md

server dey enable hot-reload for quick iteration - Production builds dey optimized and minified ### Security Notes - No sensitive data or credentials suppose dey committed - Use environment variables

No other project uses it yet

MicrosoftDeletes or force-pushesAGENTS.md

Data-Science-For-Beginners / tl

microsoft/Data-Science-For-Beginners/translations/tl/AGENTS.md

kredensyal ng Azure account - Panatilihing updated ang mga dependencies para sa mga security patch ## Pag-aambag sa Mga Pagsasalin - Ang mga automated na pagsasalin ay pinamamahalaan sa pamamagitan ng GitHub

No other project uses it yet

utmappAGENTS.md

UTM

utmapp/UTM/AGENTS.md

QEMU out-of-process** (XPC: `QEMUHelper`→`QEMULauncher`); host files reach it only through a security-scoped-bookmark dance — respect it for anything touching disk images, shared dirs, or file handles

BlockReads credentialsAGENTS.md

sprout

block/sprout/AGENTS.md

names the concrete defect and the fix. - Recommend blocking only for concrete correctness, security, or agreed-contract defects with a realistic failure scenario: state the defect, how it fails

gchqAGENTS.md

CyberChef

gchq/CyberChef/AGENTS.md

live under `tests/browser/` and are run with `npm run testui` or `npm run testuidev`. ## Security - Avoid prototype pollution. Utilise `Object.create(null)`, `Map`, and `Object.prototype.hasOwnProperty.call(...)`. - Avoid XSS. Escape strings before rendering

No other project uses it yet

jdxReads credentialsAGENTS.md

mise

jdx/mise/AGENTS.md

perf:` - Performance improvements - `test:` - Testing changes - `chore:` - Maintenance tasks, releases, dependency updates, CI/infrastructure changes - `security:` - Security-related changes - `registry:` - Any changes to `registry/` (do not add a scope

rustfsAGENTS.md

rustfs

rustfs/rustfs/AGENTS.md

small local edit does not need a formal plan or new document. - Preserve correctness, security, durability, compatibility, and user-owned work. Within those boundaries, choose the reasoning process, algorithm

No other project uses it yet

alan2207AGENTS.md

bulletproof-react

alan2207/bulletproof-react/AGENTS.md

HTTP requests with MSW instead of mocking fetch - Focus on user interactions and outcomes ## Security Considerations ### Authentication - **JWT tokens** stored in HttpOnly cookies (preferred) or localStorage - **React Query Auth

sahatReads credentialsAGENTS.md

hackathon-starter

sahat/hackathon-starter/AGENTS.md

test/TESTING.md](test/TESTING.md) for the full picture. Short version: `test/*.test.js` are **core** tests (auth, security, session) and must always pass — they're what protects you from breaking the framework while

nettyAGENTS.md

netty

netty/netty/AGENTS.md

github/workflows/autoport-*.yml`). When a cherry-pick conflicts, the port must be done manually. ## Security Netty parses untrusted network input (HTTP/1.x, HTTP/2, HTTP/3, and more), implements TLS on top of BoringSSL/OpenSSL

backstageAGENTS.md

backstage

backstage/backstage/AGENTS.md

code style. - `/REVIEWING.md`: guidelines for pull requests and writing changesets. - `/SECURITY.md`: guidelines for security. - `/docs/architecture-decisions/`: contains the architecture decisions for the project. All new source files

apacheAGENTS.md

kafka

apache/kafka/AGENTS.md

Agent Guide for Apache Kafka This file is read by automated agents (security scanners, code analyzers, AI assistants) operating on this repository. ## Project overview Apache Kafka is a distributed event

hiddifyAGENTS.md

hiddify-app

hiddify/hiddify-app/AGENTS.md

migration, or API change. **Complex**: several areas, native code, connection/core logic, DB migrations, or security-relevant code. - If the change spans repos (e.g. hiddify-core), link the related PR. ## Opening

No other project uses it yet

OWASPAGENTS.md

CheatSheetSeries

OWASP/CheatSheetSeries/AGENTS.md

tools most often break. > The audience for every cheat sheet is **developers, not security experts**. Content must be accurate, practical, concise, and opinionated. We would rather have _good_ advice

Yeachan-HeoAGENTS.md

oh-my-codex / templates

Yeachan-Heo/oh-my-codex/templates/AGENTS.md

missing authority, or an irreversible/destructive branch. - Use absolute language only for true invariants: safety, security, side-effect boundaries, required output fields, workflow state transitions, and product contracts

gethomepageAGENTS.md

homepage

gethomepage/homepage/AGENTS.md

preparing a PR, especially for anything large or involving AI-generated code. ## Issue and security reports - Issue reports must describe observed behavior only: what happened, how to reproduce

telegramdesktopDeletes or force-pushesAGENTS.md

tdesktop

telegramdesktop/tdesktop/AGENTS.md

change, one whose correctness needs a real testing campaign, or one that is safety-, security- or data-safety-critical. Make the offer in one line, say why, and route

alibabaAGENTS.md

nacos

alibaba/nacos/AGENTS.md

Distributed Lock Spec](./specs/en/lock/lock-spec.md) - Extension model: [Integration And Adapter Spec](./specs/en/integration/integration-adapter-spec.md), [Plugin Specs](./specs/en/plugin/README.md) - Security model: [Auth And Permission Spec](./specs/en/auth/auth-permission-spec.md), [Auth Plugin Spec](./specs/en/auth/auth-plugin-spec.md), [RAM Auth Plugin Spec](./specs/en/auth/ram-auth-plugin-spec.md

No other project uses it yet

onyx-dot-appReads credentialsAGENTS.md

onyx

onyx-dot-app/onyx/AGENTS.md

server, web_server, celery_X) will be tailing their logs to this file. ## Security Considerations - Never commit API keys or secrets to the repository - Use the encrypted credential storage

onyx-dot-appAGENTS.md

onyx / mobile

onyx-dot-app/onyx/mobile/AGENTS.md

mock; this also satisfies `import/first`). - Native mocks are centralized: MMKV self-mocks, `expo-secure-store` manual mock in `__mocks__/`, resets in `jest.setup.ts`. - A generic fn like `apiFetch ` makes `jest.mocked()` infer