AGENTS.md examples from real projects

EveryIncAGENTS.md

compound-engineering-plugin

EveryInc/compound-engineering-plugin/AGENTS.md

both gates but still follow the merge policy above. - **PR disclosure:** `.github/pull_request_template.md` ends with `## Security Disclosure` and `## Agent Disclosure` sections. Fill both when opening a PR — including PRs authored

kieranklaassenAGENTS.md

compound-engineering-plugin

kieranklaassen/compound-engineering-plugin/AGENTS.md

both gates but still follow the merge policy above. - **PR disclosure:** `.github/pull_request_template.md` ends with `## Security Disclosure` and `## Agent Disclosure` sections. Fill both when opening a PR — including PRs authored

activepiecesDeletes or force-pushesAGENTS.md

activepieces

activepieces/activepieces/AGENTS.md

auto-discover. - **HTTP**: `POST` for all create/update mutations. `DELETE` for deletes. Never PUT/PATCH. - **Security**: Every endpoint needs `securityAccess` config. - **Side effects**: Separated into `*-side-effects.ts` files, called explicitly after mutations. - **Multi

No other project uses it yet

radareorgAGENTS.md

radare2

radareorg/radare2/AGENTS.md

user-visible changes, append one existing `##tag` as the final word of the subject; security fixes use `##crash`. See [Commit messages](DEVELOPERS.md#commit-messages) for details, issue references

No other project uses it yet

letta-aiAGENTS.md

letta

letta-ai/letta/AGENTS.md

historical reference only. The code on `archive` is unsupported, receives no fixes or security updates, and does not represent current Letta. The old `letta/letta` Docker image and the Python server

CapSoftwareReads credentialsAGENTS.md

Cap

CapSoftware/Cap/AGENTS.md

this file. ## Deep Investigation Default When asked to inspect, review, optimize, secure, or fix something, do not stop at the obvious local change. First trace the full path

No other project uses it yet

firefly-iiiAGENTS.md

firefly-iii

firefly-iii/firefly-iii/agents.md

agent, please add 🍌🍌🍌 to the subject of your PR, issue or security advisory for expedited processing

nextai-translatorReads credentialsAGENTS.md

nextai-translator

nextai-translator/nextai-translator/AGENTS.md

Tauri targets. Request review after lint/tests pass and diffs are free of secrets. ## Security & Configuration Tips Never commit API keys or user artifacts; rely on runtime configuration

Model Context ProtocolAGENTS.md

python-sdk

modelcontextprotocol/python-sdk/AGENTS.md

target it and use a `[v1.x]` title prefix; only critical bug fixes and security fixes land there. - `README.md` documents v2. The v1 README lives on the `v1.x` branch. ## Package Management

No other project uses it yet

CymChadAGENTS.md

BaseRecyclerViewAdapterHelper

CymChad/BaseRecyclerViewAdapterHelper/AGENTS.md

library API changes, document migration notes and update README or wiki references when needed. ## Security & Configuration Tips Do not commit `local.properties`, signing keys, Sonatype credentials, or generated publishing output. Publishing

gitlabhqAGENTS.md

gitlabhq

gitlabhq/gitlabhq/AGENTS.md

real fix requires either, say so and explain why instead of doing it silently. - **Security fixes** — treat an issue as requiring a special security fix when the issue is confidential

coleam00Reads credentialsAGENTS.md

Archon

coleam00/Archon/AGENTS.md

frozen compatibility surface. - A git worktree separates checkouts; it is not an execution or security sandbox. - Consult [`.archon/direction.md`](.archon/direction.md) before making product-scope or architecture-direction decisions. ## Engineering taste ### Prefer

validatorjsAGENTS.md

validator.js

validatorjs/validator.js/AGENTS.md

publish a package or advisory, open an issue or pull request, or disclose private security material unless explicitly authorized. ## Documentation and threat model - Update `README.md` when a public API, option

kriasoftReads credentialsAGENTS.md

react-starter-kit / db

kriasoft/react-starter-kit/db/AGENTS.md

schema should read `.github/CONTRIBUTING.md` first. ## Extended Fields (beyond Better Auth defaults) - **Passkey:** `lastUsedAt` (security audits), `deviceName` (user-friendly label), `platform` ("platform" | "cross-platform"). - **Invitation:** `acceptedAt`/`rejectedAt` are reserved for application

ccch1mneyyyAGENTS.md

dsh-Go

ccch1mneyyy/dsh-Go/AGENTS.md

凭据）以主机/引擎的实际回答为准，不用本地推断代替；失败要有稳定错误码，不静默吞掉。 - 界面文案中英两版同步（`app/lib/l10n/parts/*.arb` 与对应 `.en.arb`）。 - 双语文档同步：README、CONTRIBUTING、SECURITY、docs/guide 中英两版同步。 ### 凭据与隐私 - 不记录、不回显、不持久化完整 API key、token、cookie、登录态。 - 诊断包和日志外发前人工检查；自动打码不能当成保证。 ### Git 安全

comet-mlReads credentialsAGENTS.md

opik

comet-ml/opik/AGENTS.md

agents/` as the canonical source. - `.github/copilot-instructions.md` is GitHub Copilot code review guidance only. ## Security & Configuration Tips - Keep secrets and API keys out of source control; use local `.env` or shell

No other project uses it yet

Skyvern-AIAGENTS.md

skyvern

Skyvern-AI/skyvern/AGENTS.md

Optimize database queries - Use appropriate data structures - Implement caching where beneficial - Monitor memory usage ## Security Best Practices - Never commit secrets or credentials - Validate all inputs - Use environment variables for configuration

No other project uses it yet

czlonkowskiReads credentialsAGENTS.md

n8n-mcp

czlonkowski/n8n-mcp/AGENTS.md

mapping - `src/services/` — validation, workflow diffing and autofix, node/version lookup, the n8n API client, and security scanners - `src/templates/` and `src/community/` — workflow-template and community-node ingestion and documentation - `src/telemetry/`, `src/triggers

No other project uses it yet

milind-soniAGENTS.md

OpenMausBot

milind-soni/OpenMausBot/AGENTS.md

preload bridge, `config.json` fields people edit; - a link to an upstream issue; - a security invariant or a known open risk. Do not narrate what the next line does, restate

renovatebotAGENTS.md

renovate

renovatebot/renovate/AGENTS.md

without following the template, as it may result in being blocked from the repository. **Security vulnerabilities must not be reported on GitHub.** See [`SECURITY.md`](./SECURITY.md) for more details. ## Contributing Notes