
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
agents-link
Advanced tools
Ensure AGENTS.md is the single canonical rules file in your repository and automatically expose it to major AI coding environments.
agents-link follows the AGENTS.md standard—a simple, open format for guiding coding agents, used by over 20k open-source projects.
agents-link treats AGENTS.md as the single source of truth and creates symlinks (or managed copies when symlinks aren't available) to the following target rule files:
CLAUDE.md (Claude Code).cursor/rules/AGENTS.md (Cursor).cursorrules (Cursor legacy).windsurf/rules/AGENTS.md (Windsurf).github/copilot-instructions.md (GitHub Copilot).rules (Zed)Install as a dev dependency in your project:
npm install agents-link
# or
pnpm add agents-link
Install globally to use agents-link from any directory:
npm install -g agents-link
# or
pnpm add -g agents-link
After global installation, you can run agents-link from any directory without needing it in your project's dependencies.
# Create symlinks or managed copies from AGENTS.md
agents-link init
# Re-sync content to managed copies (when AGENTS.md changes)
agents-link sync
# Remove only symlinks and managed copies
agents-link clean
# Print all target file paths and their status
agents-link print-targets
Add to your package.json:
{
"scripts": {
"agents:init": "agents-link init",
"agents:sync": "agents-link sync",
"agents:clean": "agents-link clean"
}
}
Then run:
npm run agents:init
AGENTS.md doesn't exist, agents-link init creates it with a default templateAGENTS.mdagents-link sync to update managed copies when AGENTS.md changesWhen symlinks aren't available, agents-link creates managed copies with a header:
<!-- agents-link:managed:... -->
<!-- This file is auto-managed by agents-link. Do not edit manually. -->
<!-- Source: AGENTS.md -->
The tool uses this marker to identify files it can safely update or remove.
AGENTS.md will be created automatically if it doesn't exist when you run agents-link initgit clone https://github.com/YOUR_USERNAME/agents-link.git
cd agents-link
npm install
# Test the CLI
./bin/agents-link.js --help
# Test in another directory
mkdir ~/test-agents-link && cd ~/test-agents-link
echo "# Test" > AGENTS.md
npm install /path/to/agents-link
npx agents-link init
The project uses GitHub Actions for automated publishing:
main and it auto-bumps patch version and publishesSee .github/workflows/README.md for setup instructions.
MIT
FAQs
Sync AGENTS.md to AI coding environment rule files
We found that agents-link demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.