AI review of these findings

Findings in files this artifact installs stand as reported; a model re-read the rest and said which ones it believes are false positives. This is a second opinion published beside the evidence, not a correction to it: the per-scanner reports above are unchanged, every dismissed finding is still listed there at its original severity, and the score and the Flagged badge are computed from those raw severities alone. Nothing below moved them.

Upheld as real

100

Dismissed as false positives

Not reviewed

13,777

Out of 13,877 findings across every scanner that examined this package. None of the 2 findings rated critical by their scanner were dismissed.

Not reviewed is not the same as clean. Those 13,777 findings stand exactly as their scanners reported them, at full severity, as they would have without this review.

Upheld — the review declined to dismiss these

The model could have called any of these a false positive and did not.

100 UNANALYZABLE_BINARY
Files: /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/Y4/xpc.h-49IM9V9KHFY4, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/LP/NSTextAlternatives.h-ADKO95NHJFLP, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/HW/libDER_config.h-UPCNRQVX59HW and 95 more · reported by cisco-skill-scanner

Not reviewed

13,697 The review budget for this scan was already spent before these findings were reached.
Rules: UNANALYZABLE_BINARY, DATA_EXFIL_JS_NETWORK, YARA_embedded_macho_binary and 7 more · Files: /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/D7/arm64e-apple-macos.swiftinterface-8CK1GT1UQJD7, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/ModuleCache/1XLEUA1K7ZMZF/_sys_select-134SGFEPXAZL0.pcm, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/ModuleCache/1XLEUA1K7ZMZF/CoreImage-2CUH609RP6X7P.pcm and 2315 more · reported by cisco-skill-scanner, nerlo-install-instruction
45 The review call did not complete.
Rules: COMMAND_INJECTION_JS_CHILD_PROCESS, LOW_ANALYZABILITY, AAK-IPI-WILD-CORPUS-001 and 5 more · Files: /repo/services/ingest-bridge/src/screenshots/api-service.ts, /repo/services/ingest-bridge/src/screenshots/service.ts, /repo and 24 more · reported by cisco-skill-scanner, agent-audit-kit
35 The model called these false positives and our own check did not agree, so the dismissal was refused.
Rules: UNANALYZABLE_BINARY · Files: /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/OL/thread_status.h-3LTSQR0MVUOOL, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/8Y/CVOpenGLTexture.h-1V316G3L5B78Y, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/MQ/NSHTTPCookie.h-1MSARAY4P7TMQ and 32 more · reported by cisco-skill-scanner

What the review concluded

Critical command injection and credential access risks identified.

The artifact contains critical command injection vulnerabilities in `api-service.ts` and `service.ts`, allowing shell execution. Critical findings also indicate potential credential access or sensitive data exposure within these files. High severity findings point to further credential access risks in database, embeddings, and media handling services, alongside potential file system access and network egress capabilities.

Concern level assessed by the review: Critical. This is the review's scale, not the registry badge.

What to look at

COMMAND_INJECTION_JS_CHILD_PROCESS · /repo/services/ingest-bridge/src/screenshots/api-service.ts · critical · reported by cisco-skill-scanner
COMMAND_INJECTION_JS_CHILD_PROCESS · /repo/services/ingest-bridge/src/screenshots/service.ts · critical · reported by cisco-skill-scanner
AAK-IPI-WILD-CORPUS-001 · docs/step5-verification-guide.md · high · reported by agent-audit-kit

Showing 3 of 3; the rest are in the per-scanner reports above.

Reviewed by gemini-2.5-flash. The model sees the findings, not your code, and cannot change a score.

AI review of these findings

Upheld as real

100

Dismissed as false positives

Not reviewed

13,777

Out of 13,877 findings across every scanner that examined this package. None of the 2 findings rated critical by their scanner were dismissed.

Not reviewed is not the same as clean. Those 13,777 findings stand exactly as their scanners reported them, at full severity, as they would have without this review.

Upheld — the review declined to dismiss these

The model could have called any of these a false positive and did not.

100 UNANALYZABLE_BINARY
Files: /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/Y4/xpc.h-49IM9V9KHFY4, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/LP/NSTextAlternatives.h-ADKO95NHJFLP, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/HW/libDER_config.h-UPCNRQVX59HW and 95 more · reported by cisco-skill-scanner

Not reviewed

13,697 The review budget for this scan was already spent before these findings were reached.
Rules: UNANALYZABLE_BINARY, DATA_EXFIL_JS_NETWORK, YARA_embedded_macho_binary and 7 more · Files: /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/D7/arm64e-apple-macos.swiftinterface-8CK1GT1UQJD7, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/ModuleCache/1XLEUA1K7ZMZF/_sys_select-134SGFEPXAZL0.pcm, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/ModuleCache/1XLEUA1K7ZMZF/CoreImage-2CUH609RP6X7P.pcm and 2315 more · reported by cisco-skill-scanner, nerlo-install-instruction
45 The review call did not complete.
Rules: COMMAND_INJECTION_JS_CHILD_PROCESS, LOW_ANALYZABILITY, AAK-IPI-WILD-CORPUS-001 and 5 more · Files: /repo/services/ingest-bridge/src/screenshots/api-service.ts, /repo/services/ingest-bridge/src/screenshots/service.ts, /repo and 24 more · reported by cisco-skill-scanner, agent-audit-kit
35 The model called these false positives and our own check did not agree, so the dismissal was refused.
Rules: UNANALYZABLE_BINARY · Files: /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/OL/thread_status.h-3LTSQR0MVUOOL, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/8Y/CVOpenGLTexture.h-1V316G3L5B78Y, /repo/apps/overlay-macos/.build/arm64-apple-macosx/debug/index/store/v5/records/MQ/NSHTTPCookie.h-1MSARAY4P7TMQ and 32 more · reported by cisco-skill-scanner

What the review concluded

Critical command injection and credential access risks identified.

Concern level assessed by the review: Critical. This is the review's scale, not the registry badge.

What to look at

COMMAND_INJECTION_JS_CHILD_PROCESS · /repo/services/ingest-bridge/src/screenshots/api-service.ts · critical · reported by cisco-skill-scanner
COMMAND_INJECTION_JS_CHILD_PROCESS · /repo/services/ingest-bridge/src/screenshots/service.ts · critical · reported by cisco-skill-scanner
AAK-IPI-WILD-CORPUS-001 · docs/step5-verification-guide.md · high · reported by agent-audit-kit

Showing 3 of 3; the rest are in the per-scanner reports above.

Reviewed by gemini-2.5-flash. The model sees the findings, not your code, and cannot change a score.

photographic-memory

Install

Per-scanner reports

Scanners that examined this package (5)

agentshield

cisco-skill-scanner

agent-audit-kit

nerlo-skill-scanner (behavioral)

nerlo-skill-scanner (install-doc)

Scanners that did not run on this package (6)

capslock

nerlo-multi-source

AI review of these findings

Upheld — the review declined to dismiss these

Not reviewed

What the review concluded

What to look at

Scan history

AI review of these findings

Upheld — the review declined to dismiss these

Not reviewed

What the review concluded

What to look at

Install

Per-scanner reports

Scanners that examined this package (5)

agentshield

cisco-skill-scanner

agent-audit-kit

nerlo-skill-scanner (behavioral)

nerlo-skill-scanner (install-doc)

Scanners that did not run on this package (6)

capslock

nerlo-multi-source

Composite scoreOne view among many — the per-scanner reports above are primaryScan Halted

AI review of these findings

Upheld — the review declined to dismiss these

Not reviewed

What the review concluded

What to look at

Scan history

AI review of these findings

Upheld — the review declined to dismiss these

Not reviewed

What the review concluded

What to look at