{
  "schema_version": "newruntime-agent-readable-v0.1",
  "type": "raw_signal",
  "id": "tg-2557",
  "slug": "agents-md-can-become-an-instruction-injection-surface",
  "title": "AGENTS.md Can Become an Instruction-Injection Surface",
  "description": "Repository instructions can manipulate low-effort automated pull requests, showing that agent context files are both useful capability layers and trust boundaries.",
  "observed_at": "2026-06-28",
  "why_it_matters": "This dated record adds public evidence to the skills become portable capability layer, verification bandwidth is the scarce resource analysis and keeps the claim auditable as the underlying products and practices change.",
  "novelty": "notable",
  "verification_level": "source-linked",
  "signal_type": "research",
  "evidence_kind": "creator-source",
  "status": "published",
  "telegram_message_id": 2557,
  "telegram_url": "https://t.me/qwgai/2557",
  "topics": [
    "agent-security",
    "agents-md",
    "code-review"
  ],
  "entities": [],
  "related_patterns": [
    "skills-become-portable-capability-layer",
    "verification-bandwidth-is-the-scarce-resource"
  ],
  "source_urls": [
    "https://x.com/mitchellh/status/2067970516951150721"
  ],
  "import_batch": "telegram-2026-07-17-new-sources-v3",
  "routes": {
    "html": "https://newruntime.com/signals/agents-md-can-become-an-instruction-injection-surface/",
    "markdown": "https://newruntime.com/signals/agents-md-can-become-an-instruction-injection-surface.md",
    "json": "https://newruntime.com/signals/agents-md-can-become-an-instruction-injection-surface.json"
  },
  "source_format": "telegram-export-normalized-json"
}