AGENTS.md examples from real projects

handsontableReads credentialsAGENTS.md

handsontable

handsontable/handsontable/AGENTS.md

dependencies. - Adding dependencies under non-permissive licenses requires notifying clients through the Sales team. --- ## Security - Strict XSS prevention in user-facing cell content. - Input sanitization on custom formulas and cell

handsontableAGENTS.md

handsontable / handsontable

handsontable/handsontable/handsontable/AGENTS.md

both lie when the grid renders inside a shadow root, and Salesforce Lightning Web Security additionally filters `composedPath()` down to the host chain and collapses `activeElement` to the outermost shadow

QwikDevAGENTS.md

qwik

QwikDev/qwik/AGENTS.md

unit.ts(x)` | Vitest unit files | | `*.spec.ts(x)` | Vitest spec files | | `*.e2e.ts` | Playwright e2e files | ### Security And Supply Chain Treat security-sensitive changes as behavior changes even when they look like

No other project uses it yet

QwikDevAGENTS.md

qwik

QwikDev/qwik/.ruler/AGENTS.md

unit.ts(x)` | Vitest unit files | | `*.spec.ts(x)` | Vitest spec files | | `*.e2e.ts` | Playwright e2e files | ### Security And Supply Chain Treat security-sensitive changes as behavior changes even when they look like

No other project uses it yet

matomo-orgAGENTS.md

matomo

matomo-org/matomo/AGENTS.md

range review | `matomo-review` | | In-development debt or maintainability review | `matomo-debt-check` | | Security-sensitive changes: access control, CSRF, SQL, request parsing, tokens, secrets | `matomo-security-rules` | | Public API methods

netbox-communityReads credentialsAGENTS.md

netbox

netbox-community/netbox/AGENTS.md

ruff) and the full test suite across the supported Python version matrix. - **`codeql.yml`** — CodeQL security scanning. - **`claude.yml`** — Claude Code automation hook; triggers on issue/PR comments mentioning `@claude`. - **`claude-issue-triage.yml`** — Automated issue

NirDiamantAGENTS.md

agents-towards-production

NirDiamant/agents-towards-production/AGENTS.md

independent tutorial tracks, each covering one layer of the production stack: orchestration, memory, retrieval, security and guardrails, observability and tracing, evaluation, deployment, GPU serving, fine-tuning and user interfaces

oracleAGENTS.md

graal

oracle/graal/AGENTS.md

included when behavior changes. - [ ] Flag and ask for extra permission for changes related to security (e.g., touching cryptographic code

containerdAGENTS.md

containerd

containerd/containerd/AGENTS.md

docs/garbage-collection.md) | | Namespace propagation through context | [Namespaces](docs/namespaces.md) | | Daemon-side image transfers | [Transfer service](docs/transfer.md) | ## Security findings Before scanning for security issues, evaluating a suspected vulnerability, or drafting a security report

vulhubAGENTS.md

vulhub

vulhub/vulhub/AGENTS.md

Guide Vulhub is an open-source collection of pre-built vulnerable Docker environments for security education. ## Project Structure ``` base/ / /Dockerfile # Base Docker images for vulnerable software / / # Vulnerability environments ├── docker-compose.yml ├── README.md

No other project uses it yet

xbmcAGENTS.md

xbmc

xbmc/xbmc/AGENTS.md

issues that should block the change. * Report only regressions, correctness problems, build failures, security issues, or behavior that contradicts the stated intent. * Do not suggest optional improvements, cleanup, alternative wording

vitessioAGENTS.md

vitess / changelog

vitessio/vitess/changelog/AGENTS.md

fixes, such as stricter validation that rejects input Vitess used to accept - Security fixes that have a published advisory. Until the advisory is public, leave

GitHubAGENTS.md

docs / responsible-use

github/docs/content/copilot/responsible-use/agents.md

assigned issues. The cloud agent runs in an ephemeral, firewalled environment with automated security scanning. * **Copilot Cloud**: Copilot in the Cloud (GitHub Copilot on GitHub.com, GitHub Mobile, or anywhere that

wekanAGENTS.md

wekan

wekan/wekan/AGENTS.md

pull request ITSELF is the participant, and is named.** GitHub CodeQL filing a security fix, Copilot Autofix, Dependabot raising a dependency bump: nobody wrote those, so crediting a human would

No other project uses it yet

PydanticReads credentialsAGENTS.md

pydantic-ai / workflows

pydantic/pydantic-ai/.github/workflows/AGENTS.md

design left a window in which a push got *neither* reviewer. `Pydantic AI UI Security Review` audits the UI-adapter and CLAI 2 web UI trust boundaries. It never owns

PydanticReads credentialsAGENTS.md

pydantic-ai / realtime

pydantic/pydantic-ai/pydantic_ai_slim/pydantic_ai/realtime/AGENTS.md

reimplement or filter above it. A reimplemented policy layer that drifts is a security bug, not a style problem: the realtime approval-bypass was exactly this. - When behavior differs from

gravitationalAGENTS.md

teleport

gravitational/teleport/AGENTS.md

AGENTS.md ## Review Guidelines - Focus only on critical security, reliability, performance, and scalability issues. - Ignore style, performance micro-optimizations, and readability nits unless they are tied to a significant failure ### What

NVIDIAReads credentialsAGENTS.md

OpenShell

NVIDIA/OpenShell/AGENTS.md

OCSF builder + `ocsf_emit!()` for events that represent **observable sandbox behavior** visible to operators, security teams, or agents monitoring the sandbox: - Network decisions (allow, deny, bypass detection) - HTTP/L7 enforcement decisions

refactoringhqDeletes or force-pushesAGENTS.md

tolaria

refactoringhq/tolaria/AGENTS.md

unavailable after one retry, or when satisfying the rule is technically impossible without increasing security or data-loss risk. The repository owner is the sole approver. Before proceeding, record

linkwardenReads credentialsAGENTS.md

linkwarden

linkwarden/linkwarden/AGENTS.md

user-supplied URL goes through `safeFetch` / the SSRF helpers. This is a security boundary; do not bypass it. - Server-side data access belongs in a controller under `apps/web/lib/api/controllers/`, client-side