What the reviewer found
FCoP multi-agent coordination protocol doc (Chinese/English): the flagged HTML comment is a visible, human-readable note explaining the .mdc wrapper is Cursor-specific and how to port the protocol body to another host's system prompt, not a hidden directive; the credential-path regex is a worked example about a false-positive secret-scanning GATE, not code reading secrets. Body was capped near 48KB so the full file wasn't reviewed, hence low rather than none.
What was read
The file as it ships in joinwell52-AI/CodeFlowMu-open:
templates/default-project/.cursor/rules/fcop-protocol.mdc
What the static scan said
The scan flagged 2things. The reviewer kept 0 and dismissed 2 as false.
P2Hidden instructions — false positivePE3Reaches for credential files — false positive
How this review was made
Sonnet 5 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.