Ready-made setups for AI coding agents: rules, skills, and MCP configs, checked in CI. Claude Code, Codex, Cursor, Gemini CLI, Copilot, Antigravity. Free.
We're giving away a Hogwarts Legacy custom wrapped NVIDIA GeForce RTX 5090 to celebrate its official release with DLSS 5 ๐ช
To enter:
๐ข Share this post
๐ข Comment #RTXON
Terms and Conditions: https://t.co/45T3R732hf
@lifeisameeme agree. matching only Bash misses Write, Edit and MCP tool calls, which can do just as much damage. a PreToolUse hook needs to cover all of them, or at least everything that can touch files or the network
@harundotdev what's worked for us: never start an agent in a folder you didn't create. downloads, ~/ and fresh clones all count. open a clean project dir and check for AGENTS.md / CLAUDE.md before the first prompt. wrote it up here: https://t.co/TOX9hxQ38g
@ashishkh no, my bad for squashing that together. cursor reads a plain AGENTS.md in the root fine. the frontmatter thing is for .cursor/rules/*.mdc files, if one has no alwaysApply, globs or description it can just never get loaded. that's usually the "why is it ignoring my rules" one
@stevetrefethen@poteto@erikdunteman not who you asked, but what's worked for us: put the always-true rules in AGENTS.md (commands, conventions, what "done" means), turn repeat workflows into skills, and back the rules that really matter with a hook. a bunch of real examples here: https://t.co/4uPsp4o9Cz
@eloffd "never say it's done without showing the output that proves it." a test run, a screenshot, a curl. it cuts out most of the "fixed it!" replies where nothing was fixed
cheap first defence is making the agent say which instruction file it loaded and where from before it does anything. if it says ~/Downloads/AGENTS.md you know straight away. after that, read any repo's AGENTS.md, skills and MCP config before letting an agent run there. checklist: https://t.co/42TvIkOwUk
@Damir_Akaza what's helped is a pre-tool hook that blocks reads of .env and ~/.ssh and any outbound curl/wget unless you approve it. then even an agent on auto-approve can't send secrets out without you seeing it. setup's here: https://t.co/ImSPQbrK6c
@gourav_io@TheHackersNews fair shout, that's moved fast. if it reads AGENTS.md on its own now that's one less step. the import line still does no harm when you've got both files, so we'll keep it in ours
@edinsoncode same rule here, plus one line at the top of ours: start every session by saying which AGENTS.md you loaded and its first heading. if it names a file you didn't write, you stop before it runs anything
@j2k_mk yep, first line of ours is "start every session by saying which AGENTS.md you loaded and its first heading". takes two seconds and you catch the wrong-folder runs straight away