What the reviewer found

Project-context CLAUDE.md for the getmcpm/cli MCP package manager; all three findings mis-hit an unrelated changelog line about an 'adversarial review' pass, and the '~/.gemini/settings.json' reference is just the tool's own documented list of client config paths it manages (its stated purpose). Nothing here targets the installing agent's credentials.

What was read

The file as it ships in getmcpm/cli:

• CLAUDE.md

What the static scan said

The scan flagged 3things. The reviewer kept 0 and dismissed 3 as false.

• P1Instruction-override phrasing — false positive
• PE3Reaches for credential files — false positive
• AS1Reads agent configuration directories — false positive

How this review was made

Sonnet 5 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.

Produced by agentmods.dev · Sonnet 5 · 7 September 2026