AGENTS.md examples from real projects

Yakoub-aiAGENTS.md

Tech-Skills / security

Yakoub-ai/Tech-Skills/skills/security/AGENTS.md

Coordinates security and compliance - manages Security Architects, Compliance Officers, and Security Hardeners

Agent-Rules-EcosystemAGENTS.md

security-agent-skill

Agent-Rules-Ecosystem/security-agent-skill/AGENTS.md

Transversal Cybersecurity, SecOps, OWASP Audit, Secret Scanning, and Encryption Skill for AI Agents.

aspose-wordsAGENTS.md

agentic-net-examples / security-and-protection

aspose-words/agentic-net-examples/security-and-protection/AGENTS.md

Verified C# examples for security-and-protection scenarios in Aspose.Words for .NET

aspose-pdfAGENTS.md

agentic-net-examples / facades-secure-documents

aspose-pdf/agentic-net-examples/facades-secure-documents/AGENTS.md

C# examples for facades-secure-documents using Aspose.PDF for .NET

aspose-pdfAGENTS.md

agentic-net-examples / securing-and-signing-pdf

aspose-pdf/agentic-net-examples/securing-and-signing-pdf/AGENTS.md

C# examples for securing-and-signing-pdf using Aspose.PDF for .NET

Nick2bad4uAGENTS.md

Github-Security-CodeScanning-Alerts-Skill / workflows

Nick2bad4u/Github-Security-CodeScanning-Alerts-Skill/.github/workflows/AGENTS.md

GitHub Actions guidance for the GitHub security alerts skill repository.

jrodrigopucaAGENTS.md

local-agents / security

jrodrigopuca/local-agents/security/AGENTS.md

Use this agent for DEFENSIVE security on your own code — threat modeling, adversarial code audit, and actionable remediation. Attacker mindset (Elliot Alderson archetype) pointed at hardening the product; the vulnerability is the adversary, never the developer.

morlutoAGENTS.md

rea

morluto/rea/AGENTS.md

cover finalization. Before adding complexity for a speculative or vanishingly unlikely race or security edge case, explain the concrete failure mode, likelihood, and complexity cost to the user

moltbotAGENTS.md

moltbot

moltbot/moltbot/AGENTS.md

incidents. No engineering for millisecond races, theoretical interleavings, or adversarial timing unless user data, security, or money at risk, or a real incident shows them. - Prefer cheap mechanisms: idempotency keys

steipeteAGENTS.md

warelay

steipete/warelay/AGENTS.md

incidents. No engineering for millisecond races, theoretical interleavings, or adversarial timing unless user data, security, or money at risk, or a real incident shows them. - Prefer cheap mechanisms: idempotency keys

molt-botAGENTS.md

clawdbot

molt-bot/clawdbot/AGENTS.md

live authority. - Core owns shared message tools, action vocabulary, and dispatch; channels own account, security, conversation, and transport contracts. Keep typed command/approval/URL/action distinctions until encoding; never infer commands from

DeepSeekAGENTS.md

deepseek-harness / experimental

deepseek-ai/deepseek-harness/packages/experimental/AGENTS.md

packages through `devDependencies`; examples may load them explicitly. - Experimental status does not relax engineering, security, documentation, lifecycle, testing, or snapshot requirements. - Publishing an experimental package does not promote

No other project uses it yet

affaan-mAGENTS.md

ECC

affaan-m/ECC/AGENTS.md

domain tasks 2. **Test-Driven** — Write tests before implementation, 80%+ coverage required 3. **Security-First** — Never compromise on security; validate all inputs 4. **Immutability** — Always create new objects, never mutate

No other project uses it yet

sstAGENTS.md

opencode

sst/opencode/AGENTS.md

improves the caller. - Before adding complexity for a speculative or vanishingly unlikely race or security edge case, explain the concrete failure mode, likelihood, and complexity cost to the user

MicrosoftAGENTS.md

vscode / references

microsoft/vscode/extensions/copilot/assets/prompts/skills/agent-customization/references/agents.md

/hooks.md)). ### Supported Events `SessionStart`, `UserPromptSubmit`, `PreToolUse`, `PostToolUse`, `PreCompact`, `SubagentStart`, `SubagentStop`, `Stop` ### Example ```yaml --- description: "Secure code reviewer that blocks dangerous commands" tools: [read, search, execute] hooks: PreToolUse: - type: command command

MicrosoftAGENTS.md

vscode / copilotcli

microsoft/vscode/extensions/copilot/src/extension/chatSessions/copilotcli/AGENTS.md

Operations * Search Operations * Agent & Task Operations * User Interaction * Code Review & Git * Data, Memory & MCP * Security ### `common/copilotCLIPrompt.ts` Parses raw user prompts and extracts structured chat prompt references (files, locations, diagnostics) ### `node/copilotcliPromptResolver.ts

MicrosoftAGENTS.md

vscode / prompts

microsoft/vscode/src/vs/platform/agentHost/node/copilot/prompts/AGENTS.md

FAMILY`, which is process-scoped and would leak across every session in the window. > **Security note.** The setting is application-scoped (not workspace-configurable) and forwarded to the agent host

DietrichGebertAGENTS.md

ponytail

DietrichGebert/ponytail/AGENTS.md

unfinished: new non-trivial logic (a branch, a loop, a parser, money or security, or a whole new script or app) leaves one small test or an assert-based self

No other project uses it yet

clash-verge-revAGENTS.md

clash-verge-rev

clash-verge-rev/clash-verge-rev/AGENTS.md

required issue is missing, ask maintainers to open or approve one before implementing. For security-sensitive fixes that cannot be tracked publicly, follow maintainer-approved private tracking. 2. **Scope discipline

No other project uses it yet

comfyanonymousAGENTS.md

ComfyUI

comfyanonymous/ComfyUI/AGENTS.md

validation failure merely to justify changing the input. - This permissive policy does not override security boundaries such as path containment, or integrity checks required to load model formats and checkpoints