How real projects brief Codex, Cursor and every other agent that reads AGENTS.md.
MicrosoftAGENTS.mdmicrosoft/Data-Science-For-Beginners/AGENTS.md
server enables hot-reload for quick iteration - Production builds are optimized and minified ### Security Notes - No sensitive data or credentials should be committed - Use environment variables for any API keys
MicrosoftAGENTS.mdmicrosoft/Data-Science-For-Beginners/translations/en/AGENTS.md
server enables hot-reload for quick iteration - Production builds are optimized and minified ### Security Notes - No sensitive data or credentials should be committed - Use environment variables for any API keys
MicrosoftAGENTS.mdmicrosoft/Data-Science-For-Beginners/translations/my/AGENTS.md
server သည် hot-reload ကို enable လုပ်သည် - Production builds များသည် optimized နှင့် minified ဖြစ်သည် ### Security Notes - Sensitive data သို့မဟုတ် credentials များကို commit မလုပ်ပါနှင့် - Cloud lessons များတွင် API keys အတွက် environment
MicrosoftAGENTS.mdmicrosoft/Data-Science-For-Beginners/translations/pcm/AGENTS.md
server dey enable hot-reload for quick iteration - Production builds dey optimized and minified ### Security Notes - No sensitive data or credentials suppose dey committed - Use environment variables
MicrosoftAGENTS.mdmicrosoft/Data-Science-For-Beginners/translations/tl/AGENTS.md
kredensyal ng Azure account - Panatilihing updated ang mga dependencies para sa mga security patch ## Pag-aambag sa Mga Pagsasalin - Ang mga automated na pagsasalin ay pinamamahalaan sa pamamagitan ng GitHub
BlockAGENTS.mdblock/buzz/AGENTS.md
names the concrete defect and the fix. - Recommend blocking only for concrete correctness, security, or agreed-contract defects with a realistic failure scenario: state the defect, how it fails
alibabaAGENTS.mdalibaba/nacos/AGENTS.md
Distributed Lock Spec](./specs/en/lock/lock-spec.md) - Extension model: [Integration And Adapter Spec](./specs/en/integration/integration-adapter-spec.md), [Plugin Specs](./specs/en/plugin/README.md) - Security model: [Auth And Permission Spec](./specs/en/auth/auth-permission-spec.md), [Auth Plugin Spec](./specs/en/auth/auth-plugin-spec.md), [RAM Auth Plugin Spec](./specs/en/auth/ram-auth-plugin-spec.md
virgiliojr94AGENTS.mdvirgiliojr94/book-to-skill/AGENTS.md
Preserve backwards compatibility unless the task explicitly authorizes a breaking change. - Do not weaken security checks, path hardening, sanitization, or generated-skill scanning to make an experiment pass. ## Execution loop
OpenAIAGENTS.mdopenai/openai-python/AGENTS.md
checker and effective budget come from main, not the PR. Keep default CODEOWNERS. ## Security requirements for coding agents - Never commit real API or admin keys, bearer tokens, webhook secrets, cloud
VercelAGENTS.mdvercel-labs/agent-skills/skills/react-best-practices/AGENTS.md
invoked directly. Next.js documentation explicitly states: "Treat Server Actions with the same security considerations as public-facing API endpoints, and verify if the user is allowed to perform a mutation
ComposioHQAGENTS.mdComposioHQ/composio/python/AGENTS.md
filesystem path, use `composio.utils.safe_path.secure_join(root, *components)`. For an untrusted filename, use `secure_basename_join(base, filename, root=root)` so ordinary extensions remain valid while the write stays anchored
LangChainAGENTS.mdlangchain-ai/deepagents/AGENTS.md
labels, and troubleshooting. - [LangChain contributing guide](https://docs.langchain.com/oss/python/contributing/overview) — general contribution policy. ## Corridor security analysis When Corridor's `analyzePlan` tool is available, create a plan and use the tool
OpenAIAGENTS.mdopenai/openai-agents-python/AGENTS.md
Project Structure Guide](#project-structure-guide) 4. [Operation Guide](#operation-guide) ## Policies & Mandatory Rules ### Security checklist Follow [SECURITY.md](SECURITY.md) for private vulnerability reporting and [CONTRIBUTING.md](CONTRIBUTING.md#security-checklist) for contributor
kestra-ioAGENTS.mdkestra-io/kestra/AGENTS.md
Kestra cannot boot in the worktree. The script is idempotent — safe to re-run. ### Security Considerations - Use tenant isolation for multi-tenant features - Implement proper authorization with `@HasAnyPermission` - Handle secrets
BloopAIAGENTS.mdBloopAI/vibe-kanban/AGENTS.md
pass. If adding runtime logic, include lightweight tests (e.g., Vitest) in the same directory. ## Security & Config Tips - Use `.env` for local overrides; never commit secrets. Key envs: `FRONTEND_PORT`, `BACKEND
BloopAIAGENTS.mdBloopAI/vibe-kanban/docs/AGENTS.md
using 8.8.8.8 as DNS server ```javascript const config = { performance: { cache: true, timeout: 30000 }, security: { encryption: 'AES-256' } }; ``` ### Cards and columns for emphasising information Example of cards and card groups: Complete
gastownhallAGENTS.mdgastownhall/beads/AGENTS.md
docs, refactoring) - `epic` - Large feature with subtasks - `chore` - Maintenance (dependencies, tooling) ### Priorities - `0` - Critical (security, data loss, broken builds) - `1` - High (major features, important bugs) - `2` - Medium (default, nice
OthmanAdiAGENTS.mdOthmanAdi/planning-with-files/AGENTS.md
GitHub did not close. ## Formats - CHANGELOG: `## [X.Y.Z] - YYYY-MM-DD`, then `### Added|Fixed|Changed|Security`, then `### Thanks` with one line per contributor (first name or @handle, what they did, issue
VercelAGENTS.mdvercel/ai/AGENTS.md
type references ``` ### JSON parsing Never use `JSON.parse` directly in production code to prevent security risks. Instead use `parseJSON` or `safeParseJSON` from `@ai-sdk/provider-utils`. ### Type Checking Always run type checking
EveryIncAGENTS.mdEveryInc/compound-engineering-plugin/AGENTS.md
both gates but still follow the merge policy above. - **PR disclosure:** `.github/pull_request_template.md` ends with `## Security Disclosure` and `## Agent Disclosure` sections. Fill both when opening a PR — including PRs authored
An open format for instructions to coding agents, read by Codex, Cursor and others. Think of it as a README written for agents.
At the repository root, with more specific files in subdirectories. Agents read the one closest to the file they're editing.
Setup and test commands, code style, and the rules a new contributor would need to know.
Claude Code reads CLAUDE.md. A one-line CLAUDE.md that points at AGENTS.md covers both.
