https://feedx.net
I then added a few more personal preferences and suggested tools from my previous failures working with agents in Python: use uv and .venv instead of the base Python installation, use polars instead of pandas for data manipulation, only store secrets/API keys/passwords in .env while ensuring .env is in .gitignore, etc. Most of these constraints don’t tell the agent what to do, but how to do it. In general, adding a rule to my AGENTS.md whenever I encounter a fundamental behavior I don’t like has been very effective. For example, agents love using unnecessary emoji which I hate, so I added a rule:
。关于这个话题，谷歌浏览器【最新下载地址】提供了深入分析
在公共场所故意裸露身体隐私部位的，处警告或者五百元以下罚款；情节恶劣的，处五日以上十日以下拘留。
When hijacking the Audio constructor, I also used Object.defineProperty with a specific, paranoid configuration: