AGENTS.md examples from real projects

jeecgbootReads credentialsAGENTS.md

JeecgBoot / jeecgboot-vue3

jeecgboot/JeecgBoot/jeecgboot-vue3/AGENTS.md

src/utils/http/axios/` wraps Axios with: - Token injection through interceptors. - MD5 request signing for API security. - Multi-tenant header support. - Standard response unwrapping through the `result` field. API functions usually follow this

No other project uses it yet

paperless-ngxAGENTS.md

paperless-ngx

paperless-ngx/paperless-ngx/AGENTS.md

speculative root causes, code analysis, or proposed fixes to agent-generated reports. ## Security reports - AI-assisted security reports must meet the legitimacy and verification requirements in [SECURITY.md](SECURITY.md#ai-assisted

apacheAGENTS.md

airflow

apache/airflow/AGENTS.md

tests --use-xdist --test-type ` (types: `airflow_aux`, `airflow_core`, `apiserver`, `dagprocessor`, `other`, `redis`, `security`, `statsd`, `webserver`) - **Run other suites of tests** `breeze testing ` (test groups: `airflow-ctl-tests`, `docker

apacheAGENTS.md

airflow / providers

apache/airflow/providers/AGENTS.md

commit messages, so most PRs do not need to touch the changelog at all. ## Security: Connection extras must not be forwarded blindly to hooks/operators **Never pass the whole `Connection.extra` dict

No other project uses it yet

ogulcancelikAGENTS.md

herdr

ogulcancelik/herdr/AGENTS.md

Local, SSH, and Cloud connections and must remain available unless retired for a security reason. - Named core codecs are immutable. Do not add, remove, reorder, or reinterpret fields or enum

danny-avilaAGENTS.md

LibreChat

danny-avila/LibreChat/AGENTS.md

Only expose intentionally approved codes and helpful user-safe information. Error disclosure is a security boundary: never forward raw exceptions, stacks, query text, credentials, request bodies, headers, provider payloads

omacomReads credentialsAGENTS.md

omarchy

omacom/omarchy/AGENTS.md

Usage.desktop"`, not `$APP_DIR/Disk\ Usage.desktop`) - Shebangs must use `#!/bin/bash` consistently (never `#!/usr/bin/env bash`). A security-sensitive entrypoint may use the exact `#!/bin/bash -p` form only when it must suppress `BASH

cliAGENTS.md

cli

cli/cli/AGENTS.md

clarification from `@cli/code-reviewers`. Do not automatically publish an issue, discussion, or comment. For security concerns, use the private route below instead. This gate does not prohibit requested private/local experiments

No other project uses it yet

files-communityAGENTS.md

Files

files-community/Files/AGENTS.md

context. Singleton activation does not imply one server instance shared across all elevation or security contexts. #### `IIterable ` and `IIterator ` proxy registration **For each new custom DTO collection crossing the process

sickn33AGENTS.md

agentic-awesome-skills

sickn33/agentic-awesome-skills/AGENTS.md

validation. - `npm run validate`: validate skill frontmatter, required sections, and schema rules. - `npm run security:docs`: run safety checks for command, install, credential, and network guidance. - `npm run test

No other project uses it yet

streamlitAGENTS.md

streamlit

streamlit/streamlit/AGENTS.md

clear error, a short doc note, or leaving the code as is. Security issues and data loss still need a real fix. This applies to review feedback too: a reviewer

No other project uses it yet

streamlitAGENTS.md

streamlit / agents

streamlit/streamlit/.claude/agents/AGENTS.md

testing-feature` | QA test features using Playwright | | `reviewing-local-changes` | Code review for quality, security, best practices, and product/API alignment | | `simplifying-local-changes` | Simplify and refine code changes

No other project uses it yet

streamlitReads credentialsAGENTS.md

streamlit / workflows

streamlit/streamlit/.github/workflows/AGENTS.md

snapshots | | `spec-validation.yml` | PR with `change:spec` label | Validates product spec PRs in `specs/` directory | ### Security & Analysis | Workflow | Trigger | Description | |----------|---------|-------------| | `codeql-analysis.yml` | Push/PR to `develop`, weekly | GitHub CodeQL security scanning

streamlitAGENTS.md

streamlit / specs

streamlit/streamlit/specs/AGENTS.md

working app is to hit it later. Preventing wrong results, data loss, or a security problem justifies an exception; enforcing tidy usage does not. ## 24. Leverage Markdown Everywhere Wherever text

payloadcmsReads credentialsAGENTS.md

payload

payloadcms/payload/AGENTS.md

authenticated `user` to payload operations. Setting `overrideAccess: true` bypasses access control and is a security vulnerability when an operation acts on behalf of a user. Incorrect: ```typescript // INSECURE - explicitly bypasses

amruthpillaiReads credentialsAGENTS.md

reactive-resume

amruthpillai/reactive-resume/AGENTS.md

full|wenyan-ultra Stop: "stop caveman" or "normal mode" Auto-Clarity: drop caveman for security warnings, irreversible actions, user confused. Resume after. Boundaries: code/commits/PRs written normal. ## Hard rules - Check

SentryAGENTS.md

sentry / src

getsentry/sentry/src/AGENTS.md

test commands, see the "Command Execution Guide" section in `/AGENTS.md` in the repository root. ## Security Guidelines ### Preventing Indirect Object References (IDOR) Multi-tenant queries MUST be scoped. Never trust user

AmruthPillaiReads credentialsAGENTS.md

Reactive-Resume

AmruthPillai/Reactive-Resume/AGENTS.md

full|wenyan-ultra Stop: "stop caveman" or "normal mode" Auto-Clarity: drop caveman for security warnings, irreversible actions, user confused. Resume after. Boundaries: code/commits/PRs written normal. ## Hard rules - Check

LangChainAGENTS.md

langgraph

langchain-ai/langgraph/AGENTS.md

This repository is a monorepo. Each library lives in a subdirectory under `libs/`. ## Corridor security analysis When Corridor's `analyzePlan` tool is available, create a plan and use the tool

No other project uses it yet

K-Dense-AIReads credentialsAGENTS.md

scientific-agent-skills

K-Dense-AI/scientific-agent-skills/AGENTS.md

tools` a space-separated string, `metadata` scalars quoted, and a warning past 500 lines. Security-scan new or substantially changed skills. Scanning uses [Cisco AI Defense Skill Scanner](https://github.com