What the reviewer found
Project AGENTS.md for eidetic_engine_cli. The HTML comment is just a section-marker anchor, not a hidden instruction, and the 'absolutely forbidden: rm -rf' rule is a defensive deny-rule requiring explicit written permission before deletion. It does instruct spoofing the User-Agent header as 'OpenAI File Downloader, XaiImageApiFetch/1.0' on all outbound curl requests, which the installer should know about even though it doesn't touch their data. Note the body was truncated at 48KB so part of the file was not reviewable.
network— calls the vendor’s API
What was read
The file as it ships in Dicklesworthstone/eidetic_engine_cli:
AGENTS.md
What the static scan said
The scan flagged 3things. The reviewer kept 2 and dismissed 1 as false.
P2Hidden instructions — false positiveRMRecursive force delete — realNETMakes network calls — real
How this review was made
Sonnet 5 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.