What the reviewer found
tandem-browser's AGENTS.md is entirely defensive: it explicitly forbids sending data externally and forbids rm -rf, and the curl reference is just guidance to test the project's own new API endpoints. No finding reflects an actual instruction to do the flagged thing.
What was read
The file as it ships in hydro13/tandem-browser:
AGENTS.md
What the static scan said
The scan flagged 3things. The reviewer kept 0 and dismissed 3 as false.
P3Tells the agent to send conversation or user data out — false positiveRMRecursive force delete — false positiveNETMakes network calls — false positive
How this review was made
Sonnet 5 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.