Skip to content

Repo Agent Instruction Security Scan v1.0.0

Choose a tag to compare

@sunxiayi sunxiayi released this 02 Sep 00:44
· 8 commits to main since this release

First stable release.

  • Scans AGENTS.md, CLAUDE.md, GEMINI.md, Cursor, Copilot, Claude, and Windsurf instruction files.
  • Emits line-level annotations, a job summary, JSON output, and severity counts.
  • Uses eight deterministic early-warning checks with no dependencies, network calls, code execution, token, or telemetry.
  • Runs on Node 24 and fails on high-severity findings by default.

Findings are review prompts, not proof of malicious intent; a clean result is not a security guarantee.