AGENTS.md examples from real projects

dragonflydbAGENTS.md

dragonfly

dragonflydb/dragonfly/AGENTS.md

basic), < 5.1 (epoll fallback) - Check: `uname -r` - Force epoll: `--proactor_type=epoll` - Docker: `--security-opt seccomp=unconfined` **FreeBSD**: Supported (kqueue backend) **macOS**: Not supported for production (use Docker/Linux) **For complete

LangChainAGENTS.md

deepagents

langchain-ai/deepagents/AGENTS.md

labels, and troubleshooting. - [LangChain contributing guide](https://docs.langchain.com/oss/python/contributing/overview) — general contribution policy. ## Corridor security analysis When Corridor's `analyzePlan` tool is available, create a plan and use the tool

No other project uses it yet

ComposioHQAGENTS.md

composio / python

ComposioHQ/composio/python/AGENTS.md

filesystem path, use `composio.utils.safe_path.secure_join(root, *components)`. For an untrusted filename, use `secure_basename_join(base, filename, root=root)` so ordinary extensions remain valid while the write stays anchored

No other project uses it yet

netbirdioAGENTS.md

netbird

netbirdio/netbird/AGENTS.md

user-before) - [Quick reference](#quick-reference) - [Structure](#structure) - [Where to look](#where-to-look) - [Security](#security) - [Agent conventions](#agent-conventions) - [Repo-wide principles](#repo-wide-principles) - [Type safety](#type-safety

No other project uses it yet

OpenAIAGENTS.md

openai-agents-python

openai/openai-agents-python/AGENTS.md

that can observably diverge. | | Findings | State a supported trigger and concrete caller-visible, compatibility, security, persistence, or lifecycle consequence. Omit speculative defects, aesthetic preferences, unrelated cleanup, and symmetry without

helmAGENTS.md

helm

helm/helm/AGENTS.md

exception to the above is where incompatible changes are needed to fix a security vulnerability, where minimal breaking changes may be made to address the issue. ### Code standards - Use table

kestra-ioAGENTS.md

kestra

kestra-io/kestra/AGENTS.md

Kestra cannot boot in the worktree. The script is idempotent — safe to re-run. ### Security Considerations - Use tenant isolation for multi-tenant features - Implement proper authorization with `@HasAnyPermission` - Handle secrets

aishwaryanrAGENTS.md

awesome-generative-ai-guide / topics

aishwaryanr/awesome-generative-ai-guide/topics/agents.md

Everyone](../free_courses/openclaw_mastery_for_everyone/README.md)** ⭐ 📖 (2026) certified: configure and run your own personal AI assistant. ## 🏗️ Build 301 - **[Securing Agentic AI Systems](../resources/securing_agentic_ai_systems.md)** ⭐ 📖 (2026): attack vectors and defenses (shared with [Safety and Security](safety-security.md

sampottsAGENTS.md

plyr

sampotts/plyr/AGENTS.md

Plyr: guidance for AI coding agents Plyr is deprecated and receives security updates only. Its creator now works on [Video.js 10](https://videojs.org?utm_source=plyr), which combines Plyr, Vidstack

No other project uses it yet

apolloconfigAGENTS.md

apollo

apolloconfig/apollo/AGENTS.md

against `apolloconfig/apollo` and fill the template with real content (not the raw template text). ## Security & Configuration Notes - Apollo supports H2 in-memory for local development and MySQL for production; prefer

AgriciDanielAGENTS.md

claude-seo

AgriciDaniel/claude-seo/AGENTS.md

demand 2. **Industry Detection**: Auto-detect SaaS, e-commerce, local, publisher, agency 3. **Security**: All scripts call `validate_url()` for SSRF protection 4. **Config location**: `~/.config/claude-seo/` for API credentials

envoyproxyAGENTS.md

envoy

envoyproxy/envoy/AGENTS.md

entry in `source/extensions/extensions_build_config.bzl` (or `contrib/contrib_build_config.bzl` for contrib extensions) - An entry in `source/extensions/extensions_metadata.yaml` (status, security posture, categories) - `CODEOWNERS` entries listing the two proposed extension reviewers - Docs and a `new_features` release

celeryAGENTS.md

celery

celery/celery/.github/Agents.md

including "Reporting Bugs" - [What reviewers check](.github/copilot-instructions.md): docs versioning, scope, backward compatibility, and tests. - [Security policy](SECURITY.md): never report a vulnerability in public

QwenLMAGENTS.md

qwen-code

QwenLM/qwen-code/AGENTS.md

been through roughly **5 review rounds**, land only Critical fixes — correctness, security, data loss, regressions — and defer remaining Suggestions to a follow-up issue or PR. Record each deferral

No other project uses it yet

charmbraceletAGENTS.md

crush

charmbracelet/crush/AGENTS.md

native passphrase dialogs via loopback pinentry) sshaskpass/ Integrated SSH askpass: OpenSSH credential prompts and security key touches rendered as native dialogs and warnings skills/ Skill file discovery and loading shell

No other project uses it yet

OtterMindAGENTS.md

Chat2DB

OtterMind/Chat2DB/AGENTS.md

published listeners on loopback unless remote exposure is explicitly requested and documented with its security impact. Do not change the container's required internal `0.0.0.0` binding to enforce a host

bagistoAGENTS.md

bagisto

bagisto/bagisto/AGENTS.md

standards` owns the detail: worked examples, Blade, Laravel idiom, data access, localization and the security checklists. ## Database Compatibility Every query, migration and raw fragment has to work on **MySQL

alibabaAGENTS.md

druid

alibaba/druid/AGENTS.md

Maven 3.6+ ## Project Structure - `core/` — Main library: connection pool, SQL parser, filter chain, wall security, monitoring - `druid-spring-boot-starter/` — Spring Boot 2.x auto-configuration - `druid-spring-boot

OthmanAdiAGENTS.md

planning-with-files

OthmanAdi/planning-with-files/AGENTS.md

GitHub did not close. ## Formats - CHANGELOG: `## [X.Y.Z] - YYYY-MM-DD`, then `### Added|Fixed|Changed|Security`, then `### Thanks` with one line per contributor (first name or @handle, what they did, issue

VercelAGENTS.md

ai

vercel/ai/AGENTS.md

type references ``` ### JSON parsing Never use `JSON.parse` directly in production code to prevent security risks. Instead use `parseJSON` or `safeParseJSON` from `@ai-sdk/provider-utils`. ### Type Checking Always run type checking

No other project uses it yet