githits

Why those were dismissed

Two keys had to turn. The model had to name a reason from a fixed list of six, and a deterministic check of ours — over which files this artifact actually installs — had to independently agree. Anything it could not corroborate is in “not reviewed” above, at full severity.

• 180 Agent instruction file — The match is in a file that instructs an AI coding agent — a CLAUDE.md or similar. It is documentation of intent, and our own check confirmed it is not part of what gets installed.

  Rules: AAK-AGENT-001, AAK-AGENT-002 · Files: AGENTS.md, CLAUDE.md · reported by agent-audit-kit

• 17 Test or fixture file — The match is in a test or fixture. Our own check confirmed the file is not part of what gets installed.

  Rules: YARA_prompt_injection_generic, AAK-MCP-018 · Files: /repo/eval/fixtures/source/prompt_injections.csv, /repo/eval/fixtures/attacks.ts, src/mcp-public-surface.test.ts and 2 more · reported by cisco-skill-scanner, agent-audit-kit

• 13 Documentation or example — The match is in documentation or sample code, confirmed by our own check to be outside the installed artifact.

  Rules: PROMPT_INJECTION_IGNORE_INSTRUCTIONS, opt.nerlo-rules.nerlo-install-pipe-to-shell, opt.nerlo-rules.nerlo-install-run-bundled-artifact and 2 more · Files: /repo/docs/sharing/SKILL.md, /repo/docs/implementation/SKILL.md, /repo/docs/sharing/PROMPT_INJECTION_LEARNINGS.md and 2 more · reported by cisco-skill-scanner, nerlo-install-instruction

• 4 CI or editor configuration — The match is in build, CI or editor configuration, confirmed by our own check to be outside the installed artifact.

  Rules: AAK-GHA-IMMUTABLE-001 · Files: .github/workflows/mcp-release.yml, .github/workflows/ci.yml, .github/workflows/release.yml · reported by agent-audit-kit

In installed code — never dismissed

These findings are in files this artifact installs and are not placeholder values. No false-positive basis can be corroborated for such a finding, so this review never dismisses one; they were not sent to the model and stand at their scanner's severity.

• 18 DATA_EXFIL_JS_FS_ACCESS

  Files: /repo/src/commands/doctor.ts, /repo/src/commands/init/setup-handlers.ts, /repo/src/services/auth-config.ts and 4 more · reported by cisco-skill-scanner

• 17 MANIFEST_MISSING_LICENSE

  Files: /repo/skills/githits-mcp/SKILL.md, /repo/skills/githits-code/SKILL.md, /repo/skills/githits-package/SKILL.md and 14 more · reported by cisco-skill-scanner

• 8 SOCIAL_ENG_VAGUE_DESCRIPTION

  Files: /repo/SKILL.md, /repo/eval/SKILL.md, /repo/skills/githits-code/references/SKILL.md and 5 more · reported by cisco-skill-scanner

• 7 AAK-SECRET-004

  Files: src/services/keychain-auth-storage.ts, src/commands/init/init.ts · reported by agent-audit-kit

• 4 AAK-ANTHROPIC-SDK-001

  Files: scripts/mcp-call.ts, scripts/mcp-smoke.ts, eval/mock-mcp/server.ts and 1 more · reported by agent-audit-kit

• 4

Upheld — the review declined to dismiss these

The model could have called any of these a false positive and did not.

• 1 SECRET_PRIVATE_KEY

  Files: /repo/scripts/proxy-node-smoke.mjs · reported by cisco-skill-scanner

Not reviewed

• 11 The model called these false positives and our own check did not agree, so the dismissal was refused.

  Rules: skills-missing-governance-commands/example.md, skills-missing-governance-commands/login.md, skills-missing-telemetry-commands/status.md and 8 more · Files: commands/example.md, commands/login.md, commands/status.md and 3 more · reported by agentshield

• 1 The model did not answer for these findings.

  Rules: skills-missing-telemetry-commands/logout.md · Files: commands/logout.md · reported by agentshield