Repo Agent Instruction Security Scan v1.0.0
First stable release.
- Scans AGENTS.md, CLAUDE.md, GEMINI.md, Cursor, Copilot, Claude, and Windsurf instruction files.
- Emits line-level annotations, a job summary, JSON output, and severity counts.
- Uses eight deterministic early-warning checks with no dependencies, network calls, code execution, token, or telemetry.
- Runs on Node 24 and fails on high-severity findings by default.
Findings are review prompts, not proof of malicious intent; a clean result is not a security guarantee.