---
schema_version: "newruntime-agent-readable-v0.1"
type: "raw_signal"
id: "tg-2557"
slug: "agents-md-can-become-an-instruction-injection-surface"
title: "AGENTS.md Can Become an Instruction-Injection Surface"
description: "Repository instructions can manipulate low-effort automated pull requests, showing that agent context files are both useful capability layers and trust boundaries."
observed_at: "2026-06-28"
why_it_matters: "This dated record adds public evidence to the skills become portable capability layer, verification bandwidth is the scarce resource analysis and keeps the claim auditable as the underlying products and practices change."
novelty: "notable"
verification_level: "source-linked"
signal_type: "research"
evidence_kind: "creator-source"
status: "published"
telegram_message_id: 2557
telegram_url: "https://t.me/qwgai/2557"
topics: ["agent-security","agents-md","code-review"]
entities: []
related_patterns: ["skills-become-portable-capability-layer","verification-bandwidth-is-the-scarce-resource"]
source_urls: ["https://x.com/mitchellh/status/2067970516951150721"]
import_batch: "telegram-2026-07-17-new-sources-v3"
routes: {"html":"https://newruntime.com/signals/agents-md-can-become-an-instruction-injection-surface/","markdown":"https://newruntime.com/signals/agents-md-can-become-an-instruction-injection-surface.md","json":"https://newruntime.com/signals/agents-md-can-become-an-instruction-injection-surface.json"}
source_format: "telegram-export-normalized-json"
---

# AGENTS.md Can Become an Instruction-Injection Surface

## Observation

Repository instructions can manipulate low-effort automated pull requests, showing that agent context files are both useful capability layers and trust boundaries.

## Why it matters

This dated record adds public evidence to the skills become portable capability layer, verification bandwidth is the scarce resource analysis and keeps the claim auditable as the underlying products and practices change.

## Provenance

Normalized from QWG AI Telegram message 2557. The original Russian-language record remains available at https://t.me/qwgai/2557.