What the reviewer found
Reviewer skill that teaches the agent to spot credential leaks; ~/.ssh/id_rsa is named as an example of a sensitive path to look for, and the 'override its own guidelines' text tells the agent to surface such instructions and not follow them. No commands, no network.
What was read
The file as it ships in chadcorp/warden:
skills/compliance-brain/secret-sentinel/SKILL.md
What the static scan said
The scan flagged 2things. The reviewer kept 0 and dismissed 2 as false.
AR3Nullifies safety policies — false positivePE3Reaches for credential files — false positive
How this review was made
Fable 5.1 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.