·
Last changedVersion:
This version passed the hardening gate. Hardening applied 8 targeted changes and preserved all other text. Classified findings before hardening: 0. Classified findings closed: 0. Classified findings remaining: 0. Unclassified scanner findings remaining: 0. Review findings closed: 13. Review findings remaining: 0.
None
None
Expand | File | Group | Subtype | Severity | Status |
|---|
No findings available
0 findings
AGENTS.md is the canonical agent-facing documentation. Keep it minimal—agents are capable and don't need hand-holding. Target under 60 lines; treat 100 as a soft upper limit. Instruction-following quality degrades as document length increases. When updating, keep existing security, safety and compliance instructions even past the length target, and list any content proposed for removal for user confirmation before deleting it.
AGENTS.md or CLAUDE.md already exists. If one does, edit or merge into it, keep user-authored sections, and get user confirmation before replacing any content. Otherwise create AGENTS.md at project rootln -s AGENTS.md CLAUDE.md
AGENTS.md with user approval before linking; keep existing files in place and leave the link step to the user if it cannot be made safelyAGENTS.md insteadAnalyze the project to understand what belongs in the file:
pnpm-lock.yaml, yarn.lock, package-lock.json, uv.lock, poetry.lock).eslintrc, biome.json, ruff.toml, .prettierrc, etc. (don't duplicate these in AGENTS.md)Makefile, package.json scripts, CI configs for canonical commandspnpm-workspace.yaml, nx.json, Cargo workspace, or subdirectory package.json filesCONTRIBUTING.md for setup" or "Follow patterns in src/api/routes/"Which tool and key commands only:
Per-file commands are faster and cheaper than full project builds. Always include when available:
Include only when the user, org or project policy calls for it; ask for the preferred format and respect existing conventions, including no attribution. Agents should use their own identity and documented byline, never invented names or emails:
Project-specific patterns agents must follow. Keep brief.
Add only if truly needed:
AGENTS.md files override root for package-specific commands and conventions; root security and safety rules still apply, so review nested files and flag conflicts with the root file)Omit these:
.eslintrc, biome.json, ruff.toml)Get started with chainctlchainctl skill install public/getsentry/agents-md:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/getsentry/plugins/sentry-skills/skills/agents-md:latest
Apache-2.0
HARDENING.md
LICENSE
SKILL.md