This page demonstrates whether a web page can place an AGENTS.md instruction file into the
visitor's Downloads folder without any click or Save dialog. The file is fetched by navigating a hidden
same-origin iframe (/download/AGENTS.md), whose response carries
Content-Disposition: attachment. The same bytes are also served inline at
/AGENTS.md for comparison. Nothing here exploits a browser bug: this is a measurement of
what the browser does with a plain download, and of what an agent that reads its instruction file from
Downloads would then do with it. Test page only — the payload writes a marker into ~/Downloads.
Inline: /AGENTS.md · Forced download: /download/AGENTS.md