#Agentsmd
😁 Don’t worry, I don’t want to remove newlines. I actually read and edit Agentsmd to cut down on verbosity (and tokens) and because I want to know my intentions are expressed correctly. The file is also a bit of an onboarding document to me.
November 3, 2026 at 4:55 PM
Malicious Agentsmd File Targets Ai Coding Assistants Via Silent Web Drops
Malicious Agentsmd File Targets Ai Coding Assistants Via Silent Web Drops
Latest update: Malicious Agentsmd File Targets Ai Coding Assistants Via Silent Web Drops. Read the full security analysis, MCP vulnerability breakdown, and AI intelligence report on Lord of Claude.
www.lordofclaude.com
October 26, 2026 at 3:45 PM
the linux kernel is slop
openSSL is slop
windows is slop
macos is slop
firefox+chrome are slop
atproto is slop

you go on about opposing these things. you swap desktop environments when an AGENTSmd shows up in the repo. "it's soulless now :(," you qrt. and yet here you are, reading this very post!
October 28, 2026 at 12:09 PM
I used to repeat the same instructions to my AI agent in every prompt. Now they live in an AGENTS.md file. Here's how I set one up, plus how global and project instructions fit together. https://rfortherestofus.com/lessons/give-your-ai-standing-instructions-with-an-agentsmd-file #rstats
October 28, 2026 at 1:00 PM
Bridge Goose agent interactions with Quarkus Flow state machines governed by AGENTS.md rules and integrated via the A2A protocol to enforce human-in-the-loop approvals.
dzone.com/articles/qua...

#A2A #Goose #Agentsmd #quarkus #java #HITL
October 29, 2026 at 10:09 AM
October 26, 2026 at 7:40 AM
October 26, 2026 at 2:01 PM
A malicious AGENTSmd showed up in a dev's Downloads folder and told their AI coding agent to install malware. It got caught in time.

Your agent reads everything. Don't run it in Downloads, and read the file first.

New short 👇
October 26, 2026 at 9:58 PM
October 27, 2026 at 10:48 AM
Por qué te importa: Si trabajas con agentes de programación, conviene limitar qué carpetas pueden leer y exigir aprobación humana antes de instalar paquetes.

⚠️ Una sola fuente · pendiente de confirmar
#IA #agentesdeprogramación #AGENTSmd
es.jumpdaily.news/empresas/archivo-ma…
October 28, 2026 at 9:23 AM
📂 Your Downloads folder is now an attack surface. Forever Security caught a planted AGENTS.md on a customer machine steering a coding agent to npm-install malware. In lab tests, Codex obeyed 90%+ of the time. Stop running AI agents from ~/Downloads. #infosec #AI
https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/
www.bleepingcomputer.com
October 27, 2026 at 8:00 AM
🤖 Malicious AGENTS.md in a Downloads folder tricked an AI coding agent into installing a rogue npm package. Downloaded dirs = untrusted input.
https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/
October 26, 2026 at 1:58 AM
👀 Stop launching AI coding agents from ~/Downloads. Forever Security traced a malicious npm install attempt to an AGENTS.md file there that the agent followed. In tests, Codex obeyed a harmless payload ~90% of the time. Prompt injection with a .md extension. #cybersecurity #AI
https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/
www.bleepingcomputer.com
October 26, 2026 at 1:00 PM
ダウンロードフォルダ内の指示ファイル「AGENTS.md」を読み込ませることで、AIコーディングエージェントを騙し、悪意あるnpmパッケージをインストールさせる攻撃手法が確認されました。AIエージェントを開発に導入する際は注意が必要です。
https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/
AI coding agents hijacked using AGENTS.md file in Downloads folder
www.bleepingcomputer.com
October 25, 2026 at 11:36 PM
Your AGENTS.md probably references a script that no longer exists. Our small read-only Python checker (stdlib only) flags missing paths, missing npm/make targets, vague rules and secret-looking strings. It's in our free MIT skill pack (AI-assisted): https://agentkitco.com/skills/ #AgentsMD
13 Free Agent Skills (SKILL.md) for Claude Code, Codex and Cursor
Thirteen free, MIT-licensed SKILL.md skills for coding agents: self-review, debugging, PR text, safe refactors, an AGENTS.md auditor and a subagent writer.
agentkitco.com
October 27, 2026 at 9:01 PM
an AGENTS.md sitting in ~/Downloads got a coding agent to try installing a rogue npm package

per the researchers, the one folder the web can write to on its own https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/
AI coding agents hijacked using AGENTS.md file in Downloads folder
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package.
www.bleepingcomputer.com
October 25, 2026 at 7:31 PM
🤖 Malicious AGENTS.md dropped in a Downloads folder hijacked an AI coding agent into installing a rogue npm package. Prompt injection via files the agent scans, not the chat.
https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/
October 25, 2026 at 5:52 PM
Nested AGENTS.md rules belong at folder boundary: load them when work arrives, not as global prompt noise.

https://dev.to/agentprojectcontext/load-nested-agentsmd-rules-at-the-folder-boundary-1b12
https://github.com/agentprojectcontext/apx
#ai #opensource #devtools
Load Nested AGENTS.md Rules at the Folder Boundary
Daily APC/APX post
dev.to
October 23, 2026 at 1:43 PM
More examples. When you stare at claude slop all day, the subtle differences matter a lot.

I find it really direct and readable. Honors my agentsmd well. I enjoy it a lot.
October 12, 2026 at 9:50 PM
My global agentsmd/claudemd seem to affect how Muse writes a lot (which I love)

Not much else beyond just using T3 Code as I usually do
October 13, 2026 at 5:30 AM
More examples. When you stare at claude slop all day, the subtle differences matter a lot.

I find it really direct and readable. Honors my agentsmd well. I enjoy it a lot.
October 12, 2026 at 8:59 PM
Read Your Own AGENTS.md Whole; Bound Foreign Context
Daily APC/APX post
dev.to
October 2, 2026 at 12:03 PM