it depends. Sharing AGENTS.md and skills is a common thing binding all harnesses to project conventions and processes. In my org for example this enforces security review, certain level and type of test coverage, documentation conventions etc.

To be fair, things like AGENTS.md aren't supposed to contain secrets, and are helpful to publish for OSS developers who want agentically-written third-party contributions to follow certain rules.