AGENTS.md examples from real projects

activepiecesDeletes or force-pushesAGENTS.md

activepieces

activepieces/activepieces/AGENTS.md

auto-discover. - **HTTP**: `POST` for all create/update mutations. `DELETE` for deletes. Never PUT/PATCH. - **Security**: Every endpoint needs `securityAccess` config. - **Side effects**: Separated into `*-side-effects.ts` files, called explicitly after mutations. - **Multi

No other project uses it yet

radareorgAGENTS.md

radare2

radareorg/radare2/AGENTS.md

user-visible changes, append one existing `##tag` as the final word of the subject; security fixes use `##crash`. See [Commit messages](DEVELOPERS.md#commit-messages) for details, issue references

No other project uses it yet

letta-aiAGENTS.md

letta

letta-ai/letta/AGENTS.md

historical reference only. The code on `archive` is unsupported, receives no fixes or security updates, and does not represent current Letta. The old `letta/letta` Docker image and the Python server

CapSoftwareReads credentialsAGENTS.md

Cap

CapSoftware/Cap/AGENTS.md

this file. ## Deep Investigation Default When asked to inspect, review, optimize, secure, or fix something, do not stop at the obvious local change. First trace the full path

No other project uses it yet

firefly-iiiAGENTS.md

firefly-iii

firefly-iii/firefly-iii/agents.md

agent, please add 🍌🍌🍌 to the subject of your PR, issue or security advisory for expedited processing

nextai-translatorReads credentialsAGENTS.md

nextai-translator

nextai-translator/nextai-translator/AGENTS.md

Tauri targets. Request review after lint/tests pass and diffs are free of secrets. ## Security & Configuration Tips Never commit API keys or user artifacts; rely on runtime configuration

Model Context ProtocolAGENTS.md

python-sdk

modelcontextprotocol/python-sdk/AGENTS.md

target it and use a `[v1.x]` title prefix; only critical bug fixes and security fixes land there. - `README.md` documents v2. The v1 README lives on the `v1.x` branch. ## Package Management

No other project uses it yet

CymChadAGENTS.md

BaseRecyclerViewAdapterHelper

CymChad/BaseRecyclerViewAdapterHelper/AGENTS.md

library API changes, document migration notes and update README or wiki references when needed. ## Security & Configuration Tips Do not commit `local.properties`, signing keys, Sonatype credentials, or generated publishing output. Publishing

gitlabhqAGENTS.md

gitlabhq

gitlabhq/gitlabhq/AGENTS.md

real fix requires either, say so and explain why instead of doing it silently. - **Security fixes** — treat an issue as requiring a special security fix when the issue is confidential

coleam00Reads credentialsAGENTS.md

Archon

coleam00/Archon/AGENTS.md

frozen compatibility surface. - A git worktree separates checkouts; it is not an execution or security sandbox. - Consult [`.archon/direction.md`](.archon/direction.md) before making product-scope or architecture-direction decisions. ## Engineering taste ### Prefer

validatorjsAGENTS.md

validator.js

validatorjs/validator.js/AGENTS.md

publish a package or advisory, open an issue or pull request, or disclose private security material unless explicitly authorized. ## Documentation and threat model - Update `README.md` when a public API, option

kriasoftReads credentialsAGENTS.md

react-starter-kit / db

kriasoft/react-starter-kit/db/AGENTS.md

schema should read `.github/CONTRIBUTING.md` first. ## Extended Fields (beyond Better Auth defaults) - **Passkey:** `lastUsedAt` (security audits), `deviceName` (user-friendly label), `platform` ("platform" | "cross-platform"). - **Invitation:** `acceptedAt`/`rejectedAt` are reserved for application

ccch1mneyyyAGENTS.md

dsh-Go

ccch1mneyyy/dsh-Go/AGENTS.md

凭据）以主机/引擎的实际回答为准，不用本地推断代替；失败要有稳定错误码，不静默吞掉。 - 界面文案中英两版同步（`app/lib/l10n/parts/*.arb` 与对应 `.en.arb`）。 - 双语文档同步：README、CONTRIBUTING、SECURITY、docs/guide 中英两版同步。 ### 凭据与隐私 - 不记录、不回显、不持久化完整 API key、token、cookie、登录态。 - 诊断包和日志外发前人工检查；自动打码不能当成保证。 ### Git 安全

comet-mlReads credentialsAGENTS.md

opik

comet-ml/opik/AGENTS.md

agents/` as the canonical source. - `.github/copilot-instructions.md` is GitHub Copilot code review guidance only. ## Security & Configuration Tips - Keep secrets and API keys out of source control; use local `.env` or shell

No other project uses it yet

Skyvern-AIAGENTS.md

skyvern

Skyvern-AI/skyvern/AGENTS.md

Optimize database queries - Use appropriate data structures - Implement caching where beneficial - Monitor memory usage ## Security Best Practices - Never commit secrets or credentials - Validate all inputs - Use environment variables for configuration

No other project uses it yet

czlonkowskiReads credentialsAGENTS.md

n8n-mcp

czlonkowski/n8n-mcp/AGENTS.md

mapping - `src/services/` — validation, workflow diffing and autofix, node/version lookup, the n8n API client, and security scanners - `src/templates/` and `src/community/` — workflow-template and community-node ingestion and documentation - `src/telemetry/`, `src/triggers

No other project uses it yet

milind-soniAGENTS.md

OpenMausBot

milind-soni/OpenMausBot/AGENTS.md

preload bridge, `config.json` fields people edit; - a link to an upstream issue; - a security invariant or a known open risk. Do not narrate what the next line does, restate

renovatebotAGENTS.md

renovate

renovatebot/renovate/AGENTS.md

without following the template, as it may result in being blocked from the repository. **Security vulnerabilities must not be reported on GitHub.** See [`SECURITY.md`](./SECURITY.md) for more details. ## Contributing Notes

2025EmmaAGENTS.md

vibe-coding-cn

2025Emma/vibe-coding-cn/AGENTS.md

快速复核。 - 提交前清单：跑通 `make lint`；若新增脚本 / 依赖，更新对应文档与 `Makefile` 目标；确认不携带临时文件或机密数据，并在描述中注明潜在风险或需要 reviewer 特别关注的点。 ## Security & Configuration Tips - 运行备份或转换脚本前，确认输出目录不会覆盖私有数据；建议先在临时目录试跑并检查生成文件，必要时使用只读副本。 - 外部依赖来源记录在 `libs/external/` 目录下，增减依赖时同步维护，保持可追溯；引入第三方脚本需标明许可证与来源。 ## Architecture Overview & Workflow

NVIDIAAGENTS.md

NemoClaw

NVIDIA/NemoClaw/AGENTS.md

/NVIDIA/OpenShell) sandboxes more safely. It provides CLI tooling, a blueprint for sandbox orchestration, and security hardening. Status: Active development. Interfaces may change without notice. ## Product Scope Gate Technical correctness, passing