AGENTS.mdA
AGENTS.md from kerberosmansour/sunlitsecuritylibraries is an AGENTS.md file: the standing instructions coding agents read in that repo.
mdr add kerberosmansour/sunlitsecuritylibraries/AGENTS.md@git:20261016.379efffPins git:20261016.379efff in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 14 of 14 checks passed
- Kind
- AGENTS.md file
- Repository
- kerberosmansour/sunlitsecuritylibraries
- Path
AGENTS.md- Versions recorded
- 4
- Latest version
- git:20261016.379efff, committed Oct 16, 2026
- First version recorded
- Oct 14, 2026
- Size
- 2,760 bytes
- Repository stars
- 3
- License
- a license file GitHub does not identify
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Repository agent instructions <!-- dependency-admission-osv:v1 --> ## Dependency admission: OSV is required Before introducing or updating a direct or transitive dependency, resolve the candidate lockfile without lifecycle scripts or builds, then run the repository's `python3 scripts/osv-dependency-gate.py`. Stage any new nested lockfiles so the gate can discover them. Scan every resolved production/toolchain lockfile; fixture-only vulnerable locks must remain isolated and must never be installed. Keep the exact scan report, command, lockfile diff and disposition with the change. A complete scan with no known malware is required before dependency installation with scripts, building/testing the candidate, merge or publication. OSV queries known advisories including known malicious-package reports; it does not detect all unknown malware or prove package safety. Review publisher/source provenance, integrity checksums, transitive changes, install scripts and unexpected network/native behavior too. Use `--ignore-scripts` when inspecting npm candidates; do not run an unknown Cargo build.rs/procedural macro before admission. Use official pinned/checksummed scanner …
Read the whole file at its exact version.
How to install
mdr add kerberosmansour/sunlitsecuritylibraries/AGENTS.md@sha256:804670f102ba7cb5The line at the top of this page pins the label git:20261016.379efff, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_tgtrqtn3tgzjgfck)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Oct 14, 2026 and Oct 16, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261016.379efff latest | 2026-10-16 | 379efff | 2,760 B | A | view · diff |
| git:20261015.642a4dd | 2026-10-15 | 642a4dd | 2,395 B | A | view · diff |
| git:20261015.df10fc8 | 2026-10-15 | df10fc8 | 2,133 B | A | view · diff |
| git:20261014.57d8b94 | 2026-10-14 | 57d8b94 | 1,849 B | A | view |
Audit of the latest version
- pass: Size between 200 bytes and 200 KB (2760 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kerberosmansour/sunlitsecuritylibraries · 3 stars · license a license file GitHub does not identify · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_tgtrqtn3tgzjgfck GET https://markdownregistry.com/api/v1/resolve?ref=kerberosmansour/sunlitsecuritylibraries/AGENTS.md GET https://markdownregistry.com/api/v1/blob/804670f102ba7cb58f4a777b809ce593f6922f0f71554f38a272fa6730e9ca42
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: how to write a good AGENTS.md · AGENTS.md vs CLAUDE.md · which agent file does what.
More from kerberosmansour/sunlitsecuritylibraries
Every file in kerberosmansour/sunlitsecuritylibraries