AGENTS.md examples from real projects

prowler-cloudAGENTS.md

prowler

prowler-cloud/prowler/AGENTS.md

SKILL.md](skills/prowler-api/SKILL.md) | | `prowler-ui` | Next.js + shadcn conventions | [SKILL.md](skills/prowler-ui/SKILL.md) | | `prowler-sdk-check` | Create new security checks | [SKILL.md](skills/prowler-sdk-check/SKILL.md) | | `prowler-mcp` | MCP server tools and models | [SKILL.md](skills/prowler-mcp/SKILL.md) | | `prowler-test

No other project uses it yet

prowler-cloudAGENTS.md

prowler / api

prowler-cloud/prowler/api/AGENTS.md

extend_schema` for OpenAPI - NEVER: Raw SQL queries, business logic in views ### Row-Level Security (RLS) - ALWAYS: Use `rls_transaction(tenant_id)` context manager - NEVER: Query across tenants, trust client

No other project uses it yet

prowler-cloudAGENTS.md

prowler

prowler-cloud/prowler/docs/AGENTS.md

follow this text/communication style guide: # Prowler's Brand Voice Prowler is the open cloud security platform trusted by thousands of organizations automating security monitoring and compliance with hundreds of built

No other project uses it yet

prowler-cloudAGENTS.md

prowler / prowler

prowler-cloud/prowler/prowler/AGENTS.md

Skills Reference**: For detailed patterns, use these skills: > - [`prowler-sdk-check`](../skills/prowler-sdk-check/SKILL.md) - Create new security checks (step-by-step) > - [`prowler-provider`](../skills/prowler-provider/SKILL.md) - Add new cloud providers > - [`prowler-test-sdk`](../skills/prowler-test-sdk/SKILL.md

No other project uses it yet

NVIDIAAGENTS.md

TensorRT-LLM / kv_cache_manager_v2

NVIDIA/TensorRT-LLM/cpp/tensorrt_llm/batch_manager/kv_cache_manager_v2/AGENTS.md

digests over the reuse scope and the token sequence. They are a security boundary for cross-request reuse. Do not replace, truncate, or use a non-cryptographic hash unless prefix

logto-ioAGENTS.md

logto

logto-io/logto/AGENTS.md

Database Schema Core queries run as each tenant's database role under row-level security, which changes which indexes the planner can use. Before adding an index, a hot predicate

No other project uses it yet

kekingcnAGENTS.md

kkFileView

kekingcn/kkFileView/AGENTS.md

currently covers: - common preview smoke tests - Office smoke tests - archive smoke tests - basic security and performance checks ## CI / Deployment ### CI - `maven.yml` - builds on `push` to `master` - builds on PRs targeting

palmier-ioAGENTS.md

palmier-pro

palmier-io/palmier-pro/AGENTS.md

Agent surfaces. - Prioritize findings that can cause data loss, project corruption, crashes, hangs, races, security or privacy exposure, incorrect edits, broken undo, or misleading success. Then consider performance, maintainability

MicrosoftAGENTS.md

agent-framework / samples

microsoft/agent-framework/dotnet/samples/AGENTS.md

specific credential (e.g., ManagedIdentityCredential) to avoid // latency issues, unintended credential probing, and potential security risks from fallback mechanisms. AIAgent agent = new AIProjectClient(new Uri(endpoint), new DefaultAzureCredential()) .AsAIAgent(model: model

No other project uses it yet

MicrosoftAGENTS.md

agent-framework / ag-ui

microsoft/agent-framework/python/packages/ag-ui/AGENTS.md

minus a protected set: tool-approval state, history/context-provider namespaces, message-injection state, standalone FIDES security state, and provider-owned keys. When state is exposed to the model, keep

No other project uses it yet

MicrosoftAGENTS.md

agent-framework / devui

microsoft/agent-framework/python/packages/devui/AGENTS.md

bash # Run with auto-discovery devui ./agents # Run with specific entities devui --entities my_agent.py ``` ## Security Posture DevUI is a development-only sample app, not a production hosting surface. Authentication

No other project uses it yet

apacheAGENTS.md

dolphinscheduler

apache/dolphinscheduler/AGENTS.md

Agent Guide for dolphinscheduler This file is read by automated agents (security scanners, code analyzers, AI assistants) operating on this repository. ## Security Security model: [SECURITY.md](./SECURITY.md) Agents that scan this

juice-shopAGENTS.md

juice-shop

juice-shop/juice-shop/AGENTS.md

contributing to OWASP Juice Shop. It provides comprehensive guidelines to maintain code quality, security, and adherence to project standards. ## Instruction Precedence & Guidance Layers When multiple instructions or guidance files exist

No other project uses it yet

thunderbirdAGENTS.md

thunderbird-android

thunderbird/thunderbird-android/AGENTS.md

introduce alternative frameworks. ## Coding Requirements Agents MUST: - Make small, focused, reviewable changes - Prioritize privacy, security, and correctness over convenience or shorter code - Modify only files directly related to the requested

No other project uses it yet

qemuAGENTS.md

qemu

qemu/qemu/AGENTS.md

code of conduct violations, and may lead to sanctions including a permanent ban. ## Security Policy Before classifying a potential vulnerability, read [`docs/system/security.rst`](docs/system/security.rst) to determine whether it falls within QEMU

python-pillowAGENTS.md

Pillow

python-pillow/Pillow/AGENTS.md

with `make doc`. Release notes go in `docs/releasenotes/ .rst` using the existing section structure (Security, Backwards incompatible changes, Deprecations, API changes, API additions, Other changes). Use the `:cve:` RST role

No other project uses it yet

rabbitmqAGENTS.md

rabbitmq-server

rabbitmq/rabbitmq-server/AGENTS.md

option over the `gh` CLI tool. `gh` can require an explicit operation approval. ## Security `.github/SECURITY.md` describes the security policy. Before working on submitting an analysis, make sure to understand what

tinacmsAGENTS.md

tinacms

tinacms/tinacms/AGENTS.md

editing. This monorepo contains the core packages, CLI, admin app, and framework example apps. ## Security & Disclosure This repo has a public security policy at [`SECURITY.md`](SECURITY.md). Read it before touching

tinacmsAGENTS.md

tinacms / examples

tinacms/tinacms/examples/AGENTS.md

follow directory symlinks on Windows) | `static/uploads` and `static/blocks` symlinks to `../../shared/public/*` | TinaCMS's `assertWithinBase` security check rejects symlinks that resolve outside the project root, which is why content is accessed

sstAGENTS.md

opentui

sst/opentui/AGENTS.md

files, and required checks. Describe ordinary renderer work as correctness and compatibility testing; reserve security terminology for actual security work. Use concrete scopes such as frame parity, callback ordering, resource