AGENTS.md examples from real projects

morlutoAGENTS.md

rea

morluto/rea/AGENTS.md

cover finalization. Before adding complexity for a speculative or vanishingly unlikely race or security edge case, explain the concrete failure mode, likelihood, and complexity cost to the user

moltbotAGENTS.md

moltbot

moltbot/moltbot/AGENTS.md

incidents. No engineering for millisecond races, theoretical interleavings, or adversarial timing unless user data, security, or money at risk, or a real incident shows them. - Prefer cheap mechanisms: idempotency keys

steipeteAGENTS.md

warelay

steipete/warelay/AGENTS.md

incidents. No engineering for millisecond races, theoretical interleavings, or adversarial timing unless user data, security, or money at risk, or a real incident shows them. - Prefer cheap mechanisms: idempotency keys

molt-botAGENTS.md

clawdbot

molt-bot/clawdbot/AGENTS.md

live authority. - Core owns shared message tools, action vocabulary, and dispatch; channels own account, security, conversation, and transport contracts. Keep typed command/approval/URL/action distinctions until encoding; never infer commands from

molt-botReads credentialsAGENTS.md

clawdbot / scripts

molt-bot/clawdbot/scripts/AGENTS.md

Manual or unverified cancellation remains refused. Branch-caused or unattributed failures, other required checks, security, and required reviews remain blocking. Exact-head `github_pending` preparation remains pending. GraphQL owns observations

DeepSeekReads credentialsAGENTS.md

deepseek-harness

deepseek-ai/deepseek-harness/AGENTS.md

DEFAULT_*` constant or test hook is not configurability. Protocol constants, external specs, and security invariants stay fixed. - **Misconfiguration fails loud** at load when self-contained, otherwise at the earliest resolvable

DeepSeekAGENTS.md

deepseek-harness / experimental

deepseek-ai/deepseek-harness/packages/experimental/AGENTS.md

packages through `devDependencies`; examples may load them explicitly. - Experimental status does not relax engineering, security, documentation, lifecycle, testing, or snapshot requirements. - Publishing an experimental package does not promote

No other project uses it yet

NousResearchReads credentialsAGENTS.md

hermes-agent

NousResearch/hermes-agent/AGENTS.md

contract tests; E2E with real imports against a temp `HERMES_HOME` for resolution, config, security and I/O changes; salvage by cherry-pick so authorship survives. **Rejected even when well-built

No other project uses it yet

NousResearchReads credentialsAGENTS.md

hermes-agent / hermes_cli

NousResearch/hermes-agent/hermes_cli/AGENTS.md

automatically. Top-level sections (non-exhaustive): `model, agent, terminal, compression, display, stt, tts, memory, security, delegation, smart_model_routing, checkpoints, auxiliary, curator, skills, gateway, logging, cron, profiles, plugins, honcho`. `auxiliary

NousResearchReads credentialsAGENTS.md

hermes-agent / skills

NousResearch/hermes-agent/skills/AGENTS.md

autonomous-ai-agents, blockchain, communication, creative, devops, email, health, mcp, migration, mlops, productivity, research, security, web-development`. Reviewing a skill PR: check the target directory — heavy-dep or niche skills

No other project uses it yet

affaan-mAGENTS.md

ECC

affaan-m/ECC/AGENTS.md

domain tasks 2. **Test-Driven** — Write tests before implementation, 80%+ coverage required 3. **Security-First** — Never compromise on security; validate all inputs 4. **Immutability** — Always create new objects, never mutate

No other project uses it yet

affaan-mReads credentialsAGENTS.md

ECC

affaan-m/ECC/.codex/AGENTS.md

coding, tests, formatting | GPT 5.5 | | Complex features, architecture | GPT 5.5 | | Debugging, refactoring | GPT 5.5 | | Security review | GPT 5.5 | ## Skills Discovery Skills are auto-loaded from `.agents/skills/`. Each skill contains: - `SKILL.md

sstAGENTS.md

opencode

sst/opencode/AGENTS.md

improves the caller. - Before adding complexity for a speculative or vanishingly unlikely race or security edge case, explain the concrete failure mode, likelihood, and complexity cost to the user

n8n-ioReads credentialsAGENTS.md

n8n

n8n-io/n8n/AGENTS.md

ticket in Linear - use the branch name suggested by Linear, **unless it is a security fix** (see Security Fix Hygiene below) - Use mermaid diagrams in MD files when you need

MicrosoftAGENTS.md

vscode / references

microsoft/vscode/extensions/copilot/assets/prompts/skills/agent-customization/references/agents.md

/hooks.md)). ### Supported Events `SessionStart`, `UserPromptSubmit`, `PreToolUse`, `PostToolUse`, `PreCompact`, `SubagentStart`, `SubagentStop`, `Stop` ### Example ```yaml --- description: "Secure code reviewer that blocks dangerous commands" tools: [read, search, execute] hooks: PreToolUse: - type: command command

MicrosoftAGENTS.md

vscode / copilotcli

microsoft/vscode/extensions/copilot/src/extension/chatSessions/copilotcli/AGENTS.md

Operations * Search Operations * Agent & Task Operations * User Interaction * Code Review & Git * Data, Memory & MCP * Security ### `common/copilotCLIPrompt.ts` Parses raw user prompts and extracts structured chat prompt references (files, locations, diagnostics) ### `node/copilotcliPromptResolver.ts

MicrosoftAGENTS.md

vscode / prompts

microsoft/vscode/src/vs/platform/agentHost/node/copilot/prompts/AGENTS.md

FAMILY`, which is process-scoped and would leak across every session in the window. > **Security note.** The setting is application-scoped (not workspace-configurable) and forwarded to the agent host

Significant-GravitasReads credentialsAGENTS.md

AutoGPT / autogpt_platform

Significant-Gravitas/AutoGPT/autogpt_platform/AGENTS.md

Store**: Marketplace for sharing agent templates 5. **Virus Scanning**: ClamAV integration for file upload security ### Environment Configuration #### Configuration Files - **Backend**: `backend/.env.default` (defaults) → `backend/.env` (user overrides) - **Frontend**: `frontend/.env.default` (defaults) → `frontend/.env` (user

DietrichGebertAGENTS.md

ponytail

DietrichGebert/ponytail/AGENTS.md

unfinished: new non-trivial logic (a branch, a loop, a parser, money or security, or a whole new script or app) leaves one small test or an assert-based self

No other project uses it yet

clash-verge-revAGENTS.md

clash-verge-rev

clash-verge-rev/clash-verge-rev/AGENTS.md

required issue is missing, ask maintainers to open or approve one before implementing. For security-sensitive fixes that cannot be tracked publicly, follow maintainer-approved private tracking. 2. **Scope discipline

No other project uses it yet