agents (saves to `autogpt.yaml`) |
| **Deny** | Deny this command (saves to appropriate deny list) |
### Default Security
Out of the box, the following are **denied by default**:
- Reading sensitive files
Steady5 mentions in 2 weeks
No other project uses it yet
188k1d agoReviewMountCreate a free account to mount
Open a pull request with proper PR template, test coverage, and review workflow. Guides agents through creating a PR that follows repo conventions, ensures existing behaviors aren't broken, covers new behaviors with tests, and handles review via bot when local testing isn't possible. TRIGGER when user asks to "open a PR", "create a PR", "make a PR", "submit a PR", "open pull request", "push and create PR", or any variation of opening/submitting a pull request.
Steady5 mentions in 2 weeks
62 projects use a version of this
188k1d agoReviewMountCreate a free account to mount
E2E manual testing of PRs/branches using docker compose, agent-browser, and API calls. TRIGGER when user asks to manually test a PR, test a feature end-to-end, or run integration tests against a running system.
Steady5 mentions in 2 weeks
1 project uses a version of this
188k1d agoReviewMountCreate a free account to mount
unfinished: new non-trivial logic (a branch, a loop, a parser, money or security, or a whole new script or app) leaves one small test or an assert-based self
Steady19 mentions in 2 weeks
No other project uses it yet
182k5mo agoReviewMountCreate a free account to mount
unfinished: new non-trivial logic (a branch, a loop, a parser, money or security, or a whole new script or app) leaves one small test or an assert-based self
Steady19 mentions in 2 weeks
No other project uses it yet
182k5mo agoReviewMountCreate a free account to mount
Show ponytail's measured savings (code, cost, speed) from the benchmark. One-shot display. Use for /ponytail-gain, "what does ponytail save", "ponytail impact".
Steady19 mentions in 2 weeks
41 projects use a version of this
182k5mo agoReviewMountCreate a free account to mount
Quality review of a change: is the logic right, is it safe, does it hold under real load, is risky code tested, is it fast enough, and is every line needed. Reads the connected code, not only the diff. Each finding is explained in plain English. Use for "review this", "code review", "review the last commit", "review my PR", "is this over-engineered", /ponytail-review.
Steadyinterest steady this month
69 projects use a version of this
182k5mo agoReviewMountCreate a free account to mount
Lazy senior dev mode: the smallest change that fully solves the task, and a reply a busy human understands in one read. Use on any coding task (writing, fixing, refactoring, reviewing, choosing dependencies) and when the user says "ponytail", "be lazy", "simplest solution", "yagni", or complains about over-engineering or bloat. Levels: lite, full (default), ultra.
Surging19 mentions in 2 weeks
144 projects use a version of this
182k5mo agoReviewMountCreate a free account to mount
only affects fresh pretrains with a nonstandard config, so it doesn't count. Security bugs are the exception. A bug report needs a short reproducer that you have
169k5d agoReviewMountCreate a free account to mount
Use only when the user explicitly requests a review or audit of backend code under `api/`. Supports pending-change, file-focused, and pasted-diff reviews. Do not use for implementation-only requests, diagnosis without review intent, frontend code, or backend code outside `api/`.
6 projects use a version of this
161k17d agoReviewMountCreate a free account to mount
Review frontend code under `web/` or `packages/dify-ui/` when the user explicitly requests a review or audit. Supports PRs, branches, pending changes, files, and pasted diffs. Do not use for implementation-only requests, diagnosis without review intent, or backend-only code.
required issue is missing, ask maintainers to open or
approve one before implementing. For security-sensitive fixes that cannot be
tracked publicly, follow maintainer-approved private tracking.
2. **Scope discipline
159k25d agoReviewMountCreate a free account to mount
CLAUDE.md
Guidance for Claude Code and other coding agents working in this repository.
## Security hardening for GitHub Actions
Workflow jobs in this repository that call Claude run with three protections
Surging19 mentions in 2 weeks
1 project uses a version of this
156k47d agoReviewMountCreate a free account to mount
document provides context to understand the LangChain Python project and assist with development.
## Corridor security analysis
When Corridor's `analyzePlan` tool is available, create a plan and use the tool
No other project uses it yet
150k53d agoReviewMountCreate a free account to mount
validation failure merely to justify changing the input.
- This permissive policy does not override security boundaries such as path
containment, or integrity checks required to load model formats and
checkpoints
3 projects use a version of this
147k9mo agoReviewMountCreate a free account to mount
Plain text files in a repository that tell a coding agent how the project works: commands to run, conventions to follow and things to avoid. CLAUDE.md, AGENTS.md, cursor rules and skills are the common kinds.
CLAUDE.md or AGENTS.md?
CLAUDE.md is read by Claude Code. AGENTS.md is an open format that Codex, Cursor and other agents read. Many projects keep one and point the other at it.
What is a skill?
A folder with a SKILL.md that describes one capability, such as filling PDFs or reviewing code. The agent loads it only when the task calls for it.
Can I search my own team's files too?
Your agents already can, over MCP, limited to the files you're allowed to read. Searching them from this page is coming.