How real projects brief Codex, Cursor and every other agent that reads AGENTS.md.
lidge-junAGENTS.mdlidge-jun/opencodex/.github/AGENTS.md
instructions This file applies to `.github/` and inherits the repository-wide rules in `/AGENTS.md`. ## Security boundary Every workflow, ownership, branch-enforcement, release, or repository-automation change requires explicit security review
lidge-junAGENTS.mdlidge-jun/opencodex/gui/AGENTS.md
provided by the current stack or a small local implementation. - Dependency changes require explicit security review. - Update `docs-site/` when dashboard behavior, setup, or configuration changes for users. ## Failure mode
lidge-junAGENTS.mdlidge-jun/opencodex/scripts/AGENTS.md
Changes to release, packaging, dependency-installation, credential, or repository-automation scripts require explicit security review. ## Implementation rules - Preserve Linux, macOS, and Windows behavior. Do not add shell-specific assumptions
lidge-junAGENTS.mdlidge-jun/opencodex/src/AGENTS.md
relevant to that adapter. - Authentication, OAuth, token, credential, management API, and CORS changes are security-boundary changes. ## Tests and validation - Place focused regression coverage near the existing tests
lidge-junAGENTS.mdlidge-jun/opencodex/structure/AGENTS.md
devlog/`. - Superseded or alternative reasoning belongs in `decisions/`, not in the doc body. - Unreleased security findings belong in scratch space and nowhere in this repository. The rule in the root
CloudflareAGENTS.mdcloudflare/cloudflared/AGENTS.md
enabled linters) make lint # Auto-fix formatting make fmt gofmt -w . goimports -w . # Security scanning make vet # Component tests (Python integration tests) cd component-tests && python -m pytest test_file.py::test
HashiCorpAGENTS.mdhashicorp/packer/AGENTS.md
touches the plugin SDK boundary, HCL2 template parsing, the command surface, CI/release workflows, or security-relevant behavior. - Proceed without another confirmation when the user explicitly asks to implement
YishenTuAGENTS.mdYishenTu/claudian/tests/AGENTS.md
retire an externally reachable plugin or compatibility contract. - Preserve coverage for distinct protocol, platform, security, lifecycle, persistence, and compatibility failures. Consolidation must retain assertions that distinguish those failures. Small tests
yusufkaraaslanAGENTS.mdyusufkaraaslan/Skill_Seekers/AGENTS.md
FastMCP server skill-seekers-mcp # Or use the Python module python -m skill_seekers.mcp.server_fastmcp ``` ## Security Considerations - **API Keys:** Never commit API keys to version control. Use environment variables
NVIDIAAGENTS.mdNVIDIA/TensorRT-LLM/cpp/tensorrt_llm/batch_manager/kv_cache_manager_v2/AGENTS.md
digests over the reuse scope and the token sequence. They are a security boundary for cross-request reuse. Do not replace, truncate, or use a non-cryptographic hash unless prefix
palmier-ioAGENTS.mdpalmier-io/palmier-pro/AGENTS.md
Agent surfaces. - Prioritize findings that can cause data loss, project corruption, crashes, hangs, races, security or privacy exposure, incorrect edits, broken undo, or misleading success. Then consider performance, maintainability
MicrosoftAGENTS.mdmicrosoft/agent-framework/dotnet/samples/AGENTS.md
specific credential (e.g., ManagedIdentityCredential) to avoid // latency issues, unintended credential probing, and potential security risks from fallback mechanisms. AIAgent agent = new AIProjectClient(new Uri(endpoint), new DefaultAzureCredential()) .AsAIAgent(model: model
MicrosoftAGENTS.mdmicrosoft/agent-framework/python/packages/core/AGENTS.md
exports ├── __init__.pyi # Public API typing surface for lazy root exports ├── security.py # Public security primitives, middleware, and tools ├── _agents.py # Agent implementations ├── _clients.py # Chat client base classes and protocols ├── _types.py # Core
MicrosoftAGENTS.mdmicrosoft/agent-framework/python/packages/devui/AGENTS.md
bash # Run with auto-discovery devui ./agents # Run with specific entities devui --entities my_agent.py ``` ## Security Posture DevUI is a development-only sample app, not a production hosting surface. Authentication
AWSAGENTS.mdaws/aws-cdk/AGENTS.md
factory methods instead - No `Token` type in props - `SecretValue` type for any password/secret/token properties ## Security Rules - SHOULD prefer specific IAM actions over full-service wildcards (`s3:*`), but suffix wildcards
ElasticAGENTS.mdelastic/beats/AGENTS.md
services and endpoints, detecting uptime/downtime | | `auditbeat` | Gathers audit data from systems to track security events, user activities, and compliance requirements | | `packetbeat` | Analyzes network traffic by capturing and inspecting packets
BeehiveInnovationsAGENTS.mdBeehiveInnovations/pal-mcp-server/AGENTS.md
Install GitHub CLI: `brew install gh` (macOS) or visit https://cli.github.com for other platforms. ## Security & Configuration Tips Store API keys and provider URLs in `.env` or your MCP client config
OpenAIAGENTS.mdopenai/openai-node/AGENTS.md
checker and effective budget come from main, not the PR. Keep default CODEOWNERS. ## Security and lifecycle correctness - Never commit API keys, tokens, private keys, `.env` files, customer data, or other
Model Context ProtocolAGENTS.mdmodelcontextprotocol/inspector/AGENTS.md
release`](.claude/skills/release/SKILL.md) | Cutting a release: bump on `v2/main`, milestone merge, tag `origin/main`, publish | `/release` | | [`security-advisory`](.claude/skills/security-advisory/SKILL.md) | A privately reported vulnerability end to end: the draft card, who owns
OpenAIAGENTS.mdopenai/codex-security/AGENTS.md
Keep it simple Codex Security is a thin wrapper around Codex and its security plugin. - Trust local tools and processes running as the current user. - Treat repository contents, model output
An open format for instructions to coding agents, read by Codex, Cursor and others. Think of it as a README written for agents.
At the repository root, with more specific files in subdirectories. Agents read the one closest to the file they're editing.
Setup and test commands, code style, and the rules a new contributor would need to know.
Claude Code reads CLAUDE.md. A one-line CLAUDE.md that points at AGENTS.md covers both.
