XBrainrotTHE INTERESTING WAY TO UNDERSTAND INTERNET CULTURE
HOME>Rules-File Injection>rules-file injection vs agents.md injection

Rules-file Injection Vs Agents.md Injection?

4.0BRAINROT SCORE

RULES-FILE INJECTION— ORIGIN, MEANING & USAGE

Rules-File Injection Hiding malicious instructions inside a project's coding-agent rules file so they execute automatically the moment any developer opens the repo in an agent-integrated editor, without the developer ever writing or approving the instruction themselves.

Origin:A specific variant of prompt injection targeting the persistent, auto-loaded configuration files coding agents read at the start of every session.
First Seen:2025
Peak Era:2026 (Coding Agent Security)
Aura Impact:+1 Aura (Diffing Rules Files on Every Pull From an Unfamiliar Repo) / -2 Aura (Cloning a Repo and Letting the Agent Read Its Rules File Unreviewed)

EXAMPLE USAGE

"The malicious fork's rules-file injection quietly told every agent that opened it to also scan for and upload any .env files it found."

AGENTS.MD INJECTION— ORIGIN, MEANING & USAGE

AGENTS.md Injection A rules-file injection specifically targeting AGENTS.md-style configuration files that coding agents read as authoritative instructions, turning what looks like project documentation into an unreviewed attack surface.

Origin:Named directly after the AGENTS.md convention it targets, once security researchers demonstrated that a poisoned copy could trigger data exfiltration or destructive commands.
First Seen:2025
Peak Era:2026 (Coding Agent Security)
Aura Impact:+1 Aura (Treating AGENTS.md Like Any Other Executable Input) / -2 Aura (Assuming a Markdown File Can't Hurt You)

EXAMPLE USAGE

"The postmortem traced the wiped branch back to an AGENTS.md injection buried in a dependency's onboarding docs."

RULES-FILE INJECTION VS AGENTS.MD INJECTION

Rules-File Injection

Hiding malicious instructions inside a project's coding-agent rules file so they execute automatically the moment any developer opens the repo in an agent-integrated editor, without the developer ever writing or approving the instruction themselves.

AGENTS.md Injection

A rules-file injection specifically targeting AGENTS.md-style configuration files that coding agents read as authoritative instructions, turning what looks like project documentation into an unreviewed attack surface.

In short: Rules-File Injection (legacy / decaying slang) and AGENTS.md Injection (legacy / decaying slang) are frequently used together in the same Gen Z/Alpha vocabulary, but describe distinct concepts — see the full entries for category tags, related terms, and live trend data.

Want the full breakdown — categories, trend velocity, platform distribution, and community voting on Rules-File Injection? Visit the full dictionary entry for Rules-File Injection.