@chimix/agentscan 1.3.0 → 2.3.1

package/README.md

@@ -5,19 +5,19 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/checks-99-111111?style=flat-square" alt="99 checks">
-  <img src="https://img.shields.io/badge/tests-457%20passing-111111?style=flat-square" alt="457 tests">
+  <img src="https://img.shields.io/badge/checks-163-111111?style=flat-square" alt="163 checks">
+  <img src="https://img.shields.io/badge/tests-695%20passing-111111?style=flat-square" alt="695 tests">
   <img src="https://img.shields.io/badge/network-none-111111?style=flat-square" alt="No network">
   <img src="https://img.shields.io/badge/writes-none-111111?style=flat-square" alt="Writes nothing">
   <img src="https://img.shields.io/badge/runs%20on-node%20%C2%B7%20bun-111111?style=flat-square" alt="Node or Bun">
   <img src="https://img.shields.io/npm/v/@chimix/agentscan?style=flat-square&color=111111&label=npm" alt="npm version">
   <img src="https://img.shields.io/badge/license-MIT-111111?style=flat-square" alt="MIT license">
-  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/changelog-1.3.0-111111?style=flat-square" alt="Changelog"></a>
+  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/changelog-2.3.1-111111?style=flat-square" alt="Changelog"></a>
 </p>
 
 <p align="center">
-  <strong>99 checks &middot; offline &middot; 0 network calls on <code>check</code> &middot; provenance on every rule</strong><br>
-  <sub>An offline linter for Claude Code, Command Code, Grok Build, Windsurf, portable Agent Skills, nested AGENTS.md, Copilot CLI hooks, and the MCP / hooks / rules surfaces that 1.3.0 actually implements. Spec-required checks cite a published line in <a href="docs/spec/">docs/spec/</a>. Heuristics stay at <code>info</code> and say so. The coverage matrix below is the honesty contract — five dimensions, and a documented global location that is not scanned stays unread.</sub>
+  <strong>163 checks &middot; offline &middot; 0 network calls on <code>check</code> &middot; provenance on every rule</strong><br>
+  <sub>An offline linter for Claude Code, Claude Desktop, Command Code, Grok Build, Windsurf, Kiro, Qwen Code, Factory Droid, Amp, Zed, Goose, Cline, Roo, Kilo, Junie, portable Agent Skills, nested AGENTS.md, Copilot CLI hooks (including inline settings), and the MCP / hooks / rules surfaces the registry actually implements. Spec-required checks cite a published line in <a href="docs/spec/">docs/spec/</a>. Heuristics stay at <code>info</code> and say so. The coverage matrix below is the honesty contract — five dimensions, and a documented global location that is not scanned stays unread.</sub>
 </p>
 
 ---
@@ -65,7 +65,7 @@ No AI, no network on `check`. Read the config, read the disk, compare:
 ```
 1. Discover    .claude/ .commandcode/ .grok/ .agents/ .vscode/ .cursor/ .codex/ .gemini/ .github/ .continue/ AGENTS.md skills-lock.json
 2. Extract     immutable facts — never re-read during checking
-3. Check       99 checks, each labeled spec-required, vendor-recommendation,
+3. Check       163 checks, each labeled spec-required, vendor-recommendation,
                security, internal-consistency, or heuristic
 4. Report      text · --json · --output prompt (handoff for a fixing agent)
 ```
@@ -164,7 +164,7 @@ bunx agentscan check                 # text report (cwd)
 bunx agentscan check ./my-app        # explicit root
 bunx agentscan check --json          # machine-readable
 bunx agentscan check --quiet         # summary only
-bunx agentscan check --verbose       # include KEEP, info findings, and each finding's id
+bunx agentscan check --verbose       # include info findings and each finding's id
 bunx agentscan check --fail-on warning
 bunx agentscan check --global        # also scan global skill dirs
 
@@ -183,10 +183,10 @@ Flags for `check`:
 | `--copy` | Also copy the report to the system clipboard |
 | `--no-color` | Never colour, even on a terminal (`NO_COLOR=1` does the same) |
 | `--quiet` | Summary line only |
-| `--verbose` | Show KEEP + info-severity findings, and print each finding's id |
+| `--verbose` | Show info-severity findings, and print each finding's id |
 | `--fail-on <level>` | `never` (default) · `warning` · `error` |
 | `--fail-under <0-100>` | Fail when the score drops below this floor |
-| `--global` | Also scan `~/.claude/skills`, `~/.codex/skills`, `$CODEX_HOME` / `~/.codex/config.toml`, `~/.commandcode/skills`, `~/.agents/skills`, and `$GROK_HOME` / `~/.grok` (see below) |
+| `--global` | Also scan user skills (`$CLAUDE_CONFIG_DIR/skills` or `~/.claude/skills`, `~/.commandcode/skills`, `~/.agents/skills`, `$GROK_HOME/skills`, `~/.codeium/windsurf/skills`), Claude user settings / agents / `CLAUDE.md` / rules / commands and `$CLAUDE_CONFIG_DIR/.claude.json` or `~/.claude.json` (user + matching local `mcpServers`), Copilot `$COPILOT_HOME` / `~/.copilot/hooks` and `settings.json`, Codex `$CODEX_HOME` / `~/.codex/hooks.json` and `config.toml` (MCP plus inline `[hooks]`), Grok `$GROK_HOME` / `~/.grok` (hooks + `config.toml`), Command Code user MCP/agents/memory, Antigravity `~/.gemini/config/hooks.json`, `rules/`, and `skills/`, plus `~/.gemini/AGENTS.md` and `GEMINI.md`, Kiro `~/.kiro/agents`, and Windsurf `~/.codeium/windsurf` MCP + `global_rules.md` + `hooks.json` (see below) |
 | `--config <path>` | Config file path |
 
 **v1 does not write the tree** — no `apply`, no skill delete/install. Findings may *suggest* shell commands; you run them yourself.
@@ -199,7 +199,7 @@ Flags for `check`:
   │  ⌒  │   6 error · 2 warning · 11 info hidden (--verbose)
   └─────┘
 
-agentscan v1.3.0 — touchagency
+agentscan v2.0.0 — touchagency
 
 Scanned: 46 deps · 108 skills · 1 mcp · 2 agents · packageManager=bun
 
@@ -231,7 +231,7 @@ JSON shape (abridged):
 
 ```json
 {
-  "version": "1.3.0",
+  "version": "2.0.0",
   "root": "/path/to/project",
   "factsSummary": {
     "packageManager": "bun",
@@ -259,18 +259,27 @@ Same tree → same sorted findings, with stable unique `id`s.
 
 ### `--global`
 
-Adds `~/.claude/skills`, `~/.codex/skills`, `~/.commandcode/skills`,
-`~/.agents/skills`, `$CODEX_HOME` / `~/.codex` (`config.toml` MCP plus
-`AGENTS.override.md` / `AGENTS.md`), and `$GROK_HOME` / `~/.grok` (skills,
-hooks, `config.toml`) to the structural checks: a `SKILL.md` that is malformed
-is malformed wherever it lives, and those findings carry a `source: global`
-evidence entry so you can tell them apart. Codex and Command Code skills use
-the Agent Skills contract (`name` and `description` required). Grok skills do
-not — `name` and `description` are optional. `--global` also inventories user
-Command Code agents (`~/.commandcode/agents`), MCP (`~/.commandcode/mcp.json`
-and user settings `mcp.servers`), and memory (`~/.commandcode/AGENTS.md`). It
+Adds user skill dirs (`$CLAUDE_CONFIG_DIR/skills` or `~/.claude/skills`,
+`~/.commandcode/skills`, `~/.agents/skills`, `$GROK_HOME/skills` or
+`~/.grok/skills`), Claude user settings / agents / `CLAUDE.md` / rules /
+commands and `~/.claude.json` (top-level user `mcpServers` plus local
+`projects.<scanned-path>.mcpServers`), Copilot `~/.copilot/hooks`, Codex `$CODEX_HOME` /
+`~/.codex` (`hooks.json`, `config.toml` MCP and inline `[hooks]`, plus `AGENTS.override.md` / `AGENTS.md`),
+Grok `$GROK_HOME` / `~/.grok` (hooks + `config.toml`), Antigravity
+`~/.gemini/config/hooks.json`, `rules/`, and `skills/`, plus
+`~/.gemini/AGENTS.md` and `GEMINI.md`, Kiro `~/.kiro/agents`, Command Code user
+agents / MCP / memory, and Windsurf `~/.codeium/windsurf/mcp_config.json`,
+`memories/global_rules.md`, `hooks.json`, and `skills` to the structural checks: a `SKILL.md` that
+is malformed is malformed wherever it lives, and those findings carry a
+`source: global` evidence entry so you can tell them apart. Codex and
+Command Code skills use the Agent Skills contract (`name` and `description`
+required). Grok skills do not — `name` and `description` are optional. It
 never opens `auth.json`, `mcp-tokens.json`, Codex `auth.json`, or Grok
-`auth.json` / `mcp_credentials.json`.
+`auth.json` / `mcp_credentials.json`. A `~/.claude.json` without user or
+matching local `mcpServers` is skipped, not reported as unreadable.
+`CLAUDE_CONFIG_DIR` relocates the `~/.claude` directory and, when set,
+`~/.claude.json` to `$CLAUDE_CONFIG_DIR/.claude.json`. Unset, that file
+stays in the home directory.
 
 Lockfile checks stay project-scoped — a project lockfile cannot pin a skill that
 lives in your home directory, so reporting one as "not in the lockfile" could
@@ -350,7 +359,7 @@ Optional `.agentscanrc.json` (create with `agentscan init`):
 
 ```json
 {
-  "skillPaths": [".agents/skills", ".claude/skills", "skills", ".cursor/skills", ".codex/skills", ".commandcode/skills"],
+  "skillPaths": [".agents/skills", ".claude/skills", "skills", ".cursor/skills", ".commandcode/skills", ".grok/skills", ".windsurf/skills"],
   "mcpPaths": [".mcp.json", ".claude/mcp.json", "mcp.json", ".vscode/mcp.json", ".cursor/mcp.json", ".agents/mcp_config.json", ".codex/config.toml", ".gemini/settings.json", "opencode.json", "opencode.jsonc", ".opencode/opencode.json", ".opencode/opencode.jsonc", ".continue/config.yaml", ".continue/mcpServers"],
   "policyFiles": ["AGENTS.md", "CLAUDE.md"],
   "ignoreSkills": [],
@@ -427,113 +436,201 @@ Every check lives in `src/checks/` and runs on every `check`. `agentscan rules`
 lists all of them with their ids; `agentscan explain <id>` details any finding.
 
 Most validate one discovered item against its own file on disk. Budget and
-hygiene checks are **info** (hidden unless `--verbose`). Each registry entry
-carries `provenance`: spec-required, vendor-recommendation, security,
-internal-consistency, or heuristic. `agentscan rules` lists them all.
-
-| id | Severity | Catches |
-|----|----------|---------|
-| `config.unreadable` | error | A config file that is not valid JSON, so whatever it declares is silently not in effect |
-| `scan.truncated` | info | A file past the scan cap, so the checks that read its body saw only a prefix — about this tool's reach, not about your project |
-| `claude.hook.missing-script` | error | A registered Claude command hook whose script does not exist — it never runs |
-| `claude.hook.unknown-event` | error | A Claude hook registered under an event name that is never dispatched |
-| `vscode.hook.missing-script` | error | A VS Code command hook whose script does not exist |
-| `vscode.hook.unknown-event` | error | A VS Code hook registered under an event name that is never dispatched |
-| `claude.agent.missing-frontmatter` | error | A Claude agent definition with no `---` block |
-| `claude.agent.missing-description` | error | Claude agent frontmatter has no `description` |
-| `claude.agent.missing-name` | error | Claude agent frontmatter has no `name` |
-| `claude.agent.invalid-name` | warning | Claude agent name is not lowercase letters and hyphens (error if it starts with `-` or contains `:`; filename is not compared) |
-| `claude.agent.duplicate-name` | error | Multiple Claude agent files declare the same name |
-| `claude.mcp.no-launch` | error | A Claude MCP server with neither `command` nor `url` |
-| `claude.mcp.url-without-type` | error | A Claude remote MCP server with a `url` but no `type` — read as stdio and skipped. On shared `.mcp.json`, a Command Code `transport` field satisfies the other consumer and this check does not fire |
-| `claude.mcp.reserved-name` | error | A Claude-consumed MCP server named with a reserved identifier (`workspace`, `claude-in-chrome`, `computer-use`, `Claude Preview`, `Claude Browser`) — skipped at load |
-| `vscode.mcp.no-launch` | error | A VS Code MCP server (`servers`) with neither `command` nor `url` |
-| `cursor.mcp.no-launch` | error | A Cursor MCP server with neither `command` nor `url` |
-| `antigravity.mcp.no-launch` | error | An Antigravity MCP server with neither `command` nor `serverUrl` |
-| `codex.mcp.no-launch` | error | A Codex `[mcp_servers.*]` entry with neither `command` nor `url` |
-| `gemini.mcp.no-launch` | error | A Gemini MCP server with neither `command`, `url`, nor `httpUrl` |
-| `gemini.mcp.underscore-alias` | warning | A Gemini MCP server alias contains `_`, which can make policies fail silently |
-| `opencode.mcp.no-launch` | error | An OpenCode MCP server with neither `command` nor `url` |
-| `opencode.mcp.missing-type` | error | An OpenCode MCP server missing `type: local` or `type: remote` |
-| `opencode.mcp.local-without-command` | error | An OpenCode `type: local` server with no `command` |
-| `opencode.mcp.remote-without-url` | error | An OpenCode `type: remote` server with no `url` |
-| `opencode.mcp.invalid-launch-for-type` | error | An OpenCode server whose launch field does not match its `type` |
-| `opencode.mcp.command-not-array` | error | An OpenCode V2 local `command` that is not an argv array |
-| `continue.mcp.no-launch` | error | A Continue MCP server with neither `command`, `url`, nor `uses` |
-| `continue.mcp.missing-block-metadata` | error | A standalone `.continue/mcpServers/*.yaml` block missing `name`, `version`, or `schema` (not applied to copied JSON) |
-| `commandcode.mcp.no-launch` | error | A Command Code settings / user MCP server with neither `command` nor `url` |
-| `commandcode.mcp.invalid-transport` | error | A Command Code MCP `transport` / `type` that is not `http` or `stdio` (Claude `sse` / `ws` on shared `.mcp.json` is skipped) |
-| `commandcode.mcp.http-without-url` | error | A Command Code HTTP MCP server with no `url` |
-| `commandcode.mcp.stdio-without-command` | error | A Command Code stdio MCP server with no `command` |
-| `claude.hook.command-without-command` | error | A Claude `type: command` hook with no `command` |
-| `claude.hook.http-without-url` | error | A Claude `type: http` hook with no `url` |
-| `claude.hook.mcp-tool-without-server-or-tool` | error | A Claude `type: mcp_tool` hook missing `server` or `tool` |
-| `claude.hook.unknown-handler-type` | error | A Claude hook whose required `type` is missing or not one of command, http, mcp_tool, prompt, agent |
-| `claude.hook.prompt-without-prompt` | error | A Claude `type: prompt` or `type: agent` hook with no `prompt` |
-| `claude.hook.incompatible-handler` | error | A Claude handler type that the event does not support |
-| `claude.hook.invalid-group` | error | A Claude hook matcher group with no nested `hooks` array (flat handler arrays are invalid) |
-| `vscode.hook.invalid-group` | error | A VS Code hook group that is not a command handler array |
-| `vscode.hook.command-without-command` | error | A native VS Code `type: command` hook with no `command` |
-| `vscode.hook.unknown-handler-type` | error | A native VS Code hook whose `type` is not `command` |
-| `copilot.hook.unknown-event` | error | A Copilot CLI hook registered under an event that is never dispatched |
-| `copilot.hook.missing-script` | error | A Copilot CLI command hook whose script does not exist |
-| `copilot.hook.command-without-command` | error | A Copilot CLI command hook with none of `bash`, `powershell`, or `command` |
-| `copilot.hook.http-without-url` | error | A Copilot CLI `type: http` hook with no `url` |
-| `copilot.hook.prompt-without-prompt` | error | A Copilot CLI `type: prompt` hook with no `prompt` |
-| `copilot.hook.unknown-handler-type` | error | A Copilot CLI hook whose `type` is not command, http, or prompt |
-| `copilot.hook.incompatible-handler` | error | A Copilot CLI prompt hook registered on an event other than `sessionStart` |
-| `commandcode.hook.unknown-event` | error | A Command Code hook registered under an event that is never dispatched (four events only) |
-| `commandcode.hook.missing-script` | error | A Command Code command hook whose script does not exist |
-| `commandcode.hook.invalid-group` | error | A Command Code hook group missing the required nested `hooks` array, or a non-string `matcher` |
-| `commandcode.hook.command-without-command` | error | A Command Code `type: command` hook whose `command` is missing, empty, or not a string |
-| `commandcode.hook.unknown-handler-type` | error | A Command Code hook whose `type` is missing, not a string, or not `"command"` |
-| `commandcode.hook.timeout-out-of-bounds` | error | A Command Code hook `timeout` outside 0–600 seconds |
-| `commandcode.agent.reserved-name` | error | A Command Code custom agent named `explore`, `plan`, `review`, or `general` — ignored at load |
-| `commandcode.agent.invalid-permission-mode` | error | A Command Code agent `permissionMode` that is not a documented value |
-| `commandcode.agent.invalid-field-type` | error | A Command Code agent field whose type the spec does not accept |
-| `grok.mcp.no-launch` | error | A Grok `[mcp_servers.*]` entry with neither `command` nor `url` |
-| `grok.hook.unknown-event` | error | A Grok hook registered under an event that is never dispatched (14 events) |
-| `grok.hook.missing-script` | error | A Grok command hook whose script does not exist |
-| `grok.hook.invalid-group` | error | A Grok hook group missing the required nested `hooks` array, or a non-string `matcher` |
-| `grok.hook.command-without-command` | error | A Grok `type: command` hook with no `command` |
-| `grok.hook.http-without-url` | error | A Grok `type: http` hook with no `url` |
-| `grok.hook.unknown-handler-type` | error | A Grok hook whose `type` is missing or not `command` / `http` |
-| `grok.skill.missing-frontmatter` | warning | Grok `SKILL.md` with no `---` block |
-| `mcp.command-missing` | error | An MCP `command` that is a path-like value whose file does not exist on disk |
-| `security.hardcoded-secret` | error | A token-shaped literal in MCP config (the value is never echoed back) |
-| `mcp.literal-env` | warning | Secret-named `env` values that are literals instead of interpolation |
-| `skill.missing-skill-md` | warning | A directory under a skill path with no `SKILL.md` |
-| `claude.skill.missing-frontmatter` | warning | Claude `SKILL.md` with no `---` block |
-| `claude.skill.missing-description` | info | Claude frontmatter has no `description` and no first markdown paragraph |
-| `agent-skills.skill.missing-frontmatter` | error | Portable skill `SKILL.md` has no YAML frontmatter |
-| `agent-skills.skill.missing-name` | error | Portable skill frontmatter has no required `name` |
-| `agent-skills.skill.missing-description` | error | Portable skill frontmatter has no required `description` |
-| `agent-skills.skill.invalid-name` | error | Portable skill name is not `[a-z0-9]` + hyphens |
-| `agent-skills.skill.name-does-not-match-directory` | error | Portable skill `name` does not match its directory |
-| `agent-skills.skill.name-too-long` | error | Portable skill name exceeds 64 characters |
-| `agent-skills.skill.description-too-long` | error | Portable skill description exceeds 1024 characters |
-| `agent-skills.skill.invalid-compatibility` | error | Portable skill `compatibility` is present but is not a 1–500 character string |
-| `agent-skills.skill.invalid-metadata` | error | Portable skill `metadata` is present but is not `map<string, string>` |
-| `agent-skills.skill.invalid-allowed-tools` | error | Portable skill `allowed-tools` is present but is not a string |
-| `agent-skills.skill.body-too-large` | info | Portable skill `SKILL.md` exceeds the 500-line recommendation |
-| `skill.broken-reference` | warning | The body points at a bundled file that does not exist |
-| `skill.duplicate-description` | info | Two or more skills carry an identical description (heuristic) |
-| `skill.locked-not-installed` | warning | `skills-lock.json` pins a skill that is not on disk |
-| `skill.not-in-lock` | info | A skill on disk that the lockfile does not track (installer policy) |
-| `skill.description-budget` | info | Claude skill listing text (description or first paragraph, plus `when_to_use`) exceeds the 1% context-window budget, with an 8000-character fallback and a 1536-character per-entry cap |
-| `skill.no-lockfile` | info | Skills present with no lockfile at all (only with `requireLock`) |
-| `budget.agents-md` | info | `AGENTS.md` past a secondary 150-line hint (heuristic; not an AGENTS.md requirement) |
-| `budget.claude-md` | info | `CLAUDE.md` past the official “target under 200 lines” recommendation |
-| `budget.agents` | info | More agent definitions than a focused set (>8) — heuristic proxy |
-| `budget.mcp` | info | More MCP servers than a tool-selection hint (>5) — heuristic proxy |
-| `codex.budget.instructions` | info | Codex root→cwd `AGENTS.md` chain exceeds the default 32 KiB |
-| `cursor.rule.too-large` | info | A `.cursor/rules/*.mdc` file exceeds the 500-line recommendation |
-| `windsurf.rule.too-large` | info | A Windsurf workspace rule exceeds 12,000 characters |
-| `windsurf.rule.global-too-large` | info | `~/.codeium/windsurf/memories/global_rules.md` exceeds 6,000 characters |
-| `windsurf.rule.missing-trigger` | warning | A `.devin/rules` / `.windsurf/rules` file omits frontmatter `trigger` |
-| `windsurf.mcp.no-launch` | error | Windsurf MCP server declares neither `command`, `serverUrl`, nor `url` |
-
-### Coverage in 1.3.0
+hygiene checks are **info** (hidden unless `--verbose`).
+
+Every rule states where its assertion comes from, and every report says so:
+a `provenance` label (spec-required, vendor-recommendation, security,
+internal-consistency, or heuristic) and either the vendor page it was read
+from, with the date, or an explicit note that no vendor page states it.
+
+```
+ERROR   rule:cursor.hook.unknown-event
+        "bogusEventName" is not a hook event that gets dispatched
+          bogusEventName @ .cursor/hooks.json · sessionStart, sessionEnd, ...
+        spec-required · cursor.com/docs/hooks · read 2026-09-03
+
+ERROR   rule:cursor.hook.missing-script
+        Hook points at a script that does not exist
+          afterFileEdit @ .cursor/hooks.json · ./hooks/format.sh
+        internal-consistency · no vendor page · agentscan inference
+```
+
+`agentscan rules` lists every rule with its severity, provenance and source;
+`agentscan rules --json` adds the full URL and the `docs/spec` capture holding
+the quoted lines; `agentscan explain <id>` prints both for one finding, and
+`--json` carries them on every finding. Every cited page is one
+`bun run spec:check` re-fetches and hash-compares, so a vendor rewriting it
+fails CI instead of quietly turning a quoted rule into a false positive.
+
+<!-- rules:start -->
+| id | Severity | Provenance | Source | Catches |
+|----|----------|------------|--------|---------|
+| `config.unreadable` | error/info | internal-consistency | _parser result_ | Config file is not valid JSON or cannot be read |
+| `scan.truncated` | info | internal-consistency | _scan cap_ | File is larger than the scan cap, so body checks read only a prefix of it |
+| `claude.hook.unknown-event` | error | spec-required | [code.claude.com/docs/en/hooks](https://code.claude.com/docs/en/hooks) | Hook registered under an event name that is never dispatched |
+| `claude.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Hook points at a script that does not exist, so it never runs |
+| `vscode.hook.unknown-event` | error | spec-required | [code.visualstudio.com/docs/agents/reference/hooks-reference](https://code.visualstudio.com/docs/agents/reference/hooks-reference) | VS Code hook registered under an event name that is never dispatched |
+| `vscode.hook.missing-script` | error | internal-consistency | _agentscan inference_ | VS Code hook points at a script that does not exist, so it never runs |
+| `claude.hook.invalid-group` | error | internal-consistency | [code.claude.com/docs/en/hooks](https://code.claude.com/docs/en/hooks) | Claude hook group has a matcher but no hooks array |
+| `claude.hook.command-without-command` | error | spec-required | [code.claude.com/docs/en/hooks](https://code.claude.com/docs/en/hooks) | Claude command hook is missing the command field |
+| `claude.hook.http-without-url` | error | spec-required | [code.claude.com/docs/en/hooks](https://code.claude.com/docs/en/hooks) | Claude http hook is missing the url field |
+| `claude.hook.mcp-tool-without-server-or-tool` | error | spec-required | [code.claude.com/docs/en/hooks](https://code.claude.com/docs/en/hooks) | Claude MCP tool hook is missing required server and tool fields |
+| `claude.hook.unknown-handler-type` | error | spec-required | [code.claude.com/docs/en/hooks](https://code.claude.com/docs/en/hooks) | Claude hook uses a handler type that is not command, http, mcp_tool, prompt, or agent, or omits the required type |
+| `claude.hook.prompt-without-prompt` | error | spec-required | [code.claude.com/docs/en/hooks](https://code.claude.com/docs/en/hooks) | Claude prompt or agent hook is missing the required prompt field |
+| `claude.hook.incompatible-handler` | error | spec-required | [code.claude.com/docs/en/hooks](https://code.claude.com/docs/en/hooks) | Claude hook handler type is not valid for its event |
+| `vscode.hook.invalid-group` | error | internal-consistency | [code.visualstudio.com/docs/agents/reference/hooks-reference](https://code.visualstudio.com/docs/agents/reference/hooks-reference) | VS Code hook group has a matcher but no hooks array |
+| `vscode.hook.command-without-command` | error | spec-required | [code.visualstudio.com/docs/agents/reference/hooks-reference](https://code.visualstudio.com/docs/agents/reference/hooks-reference) | VS Code command hook is missing the command field |
+| `vscode.hook.unknown-handler-type` | error | spec-required | [code.visualstudio.com/docs/agents/reference/hooks-reference](https://code.visualstudio.com/docs/agents/reference/hooks-reference) | VS Code hook uses a handler type other than the required type command |
+| `copilot.hook.unknown-event` | error/warning | spec-required | [docs.github.com/en/copilot/reference/hooks-reference](https://docs.github.com/en/copilot/reference/hooks-reference) | Copilot CLI hook registered under an event name that is never dispatched |
+| `copilot.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Copilot CLI hook points at a script that does not exist, so it never runs |
+| `copilot.hook.command-without-command` | error | spec-required | [docs.github.com/en/copilot/reference/hooks-reference](https://docs.github.com/en/copilot/reference/hooks-reference) | Copilot CLI command hook declares none of bash, powershell, command, or exec |
+| `copilot.hook.http-without-url` | error | spec-required | [docs.github.com/en/copilot/reference/hooks-reference](https://docs.github.com/en/copilot/reference/hooks-reference) | Copilot CLI http hook is missing the url field |
+| `copilot.hook.prompt-without-prompt` | error | spec-required | [docs.github.com/en/copilot/reference/hooks-reference](https://docs.github.com/en/copilot/reference/hooks-reference) | Copilot CLI prompt hook is missing the prompt field |
+| `copilot.hook.unknown-handler-type` | error | spec-required | [docs.github.com/en/copilot/reference/hooks-reference](https://docs.github.com/en/copilot/reference/hooks-reference) | Copilot CLI hook uses a handler type that is not command, http, or prompt |
+| `copilot.hook.incompatible-handler` | error | spec-required | [docs.github.com/en/copilot/reference/hooks-reference](https://docs.github.com/en/copilot/reference/hooks-reference) | Copilot CLI prompt hook is registered on an event other than sessionStart |
+| `skill.missing-skill-md` | warning | internal-consistency | [agentskills.io/specification](https://agentskills.io/specification) | Skill directory has no SKILL.md |
+| `claude.skill.missing-frontmatter` | warning | spec-required | [code.claude.com/docs/en/skills](https://code.claude.com/docs/en/skills) | SKILL.md has no YAML frontmatter block |
+| `claude.skill.missing-description` | info | vendor-recommendation | [code.claude.com/docs/en/skills](https://code.claude.com/docs/en/skills) | SKILL.md frontmatter has no description and no first non-empty markdown line |
+| `agent-skills.skill.missing-frontmatter` | error | spec-required | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill SKILL.md has no YAML frontmatter block |
+| `agent-skills.skill.missing-name` | error | spec-required | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill frontmatter has no required name |
+| `agent-skills.skill.missing-description` | error | spec-required | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill frontmatter has no required description |
+| `agent-skills.skill.invalid-name` | error | spec-required | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill name is not a valid identifier |
+| `agent-skills.skill.name-does-not-match-directory` | error | spec-required | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill name does not match its directory |
+| `agent-skills.skill.name-too-long` | error | spec-required | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill name exceeds 64 characters |
+| `agent-skills.skill.description-too-long` | error | spec-required | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill description exceeds 1024 characters |
+| `agent-skills.skill.invalid-compatibility` | error | spec-required | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill compatibility is not a string of 1–500 characters |
+| `agent-skills.skill.invalid-metadata` | error | spec-required | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill metadata is not a map of string to string |
+| `agent-skills.skill.invalid-allowed-tools` | error | spec-required | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill allowed-tools is not a string |
+| `agent-skills.skill.body-too-large` | info | vendor-recommendation | [agentskills.io/specification](https://agentskills.io/specification) | Portable skill SKILL.md exceeds the 500-line recommendation |
+| `skill.not-in-lock` | info | heuristic | _lockfile hygiene, not a requirement_ | Skill on disk is not tracked by skills-lock.json |
+| `skill.locked-not-installed` | warning | internal-consistency | _agentscan inference_ | skills-lock.json pins a skill that is not installed |
+| `skill.broken-reference` | warning | internal-consistency | [agentskills.io/specification](https://agentskills.io/specification) | SKILL.md points at a bundled file that does not exist |
+| `skill.duplicate-description` | info | heuristic | _selection hint, not a requirement_ | Two or more skills share an identical description |
+| `skill.description-budget` | info | vendor-recommendation | [code.claude.com/docs/en/skills](https://code.claude.com/docs/en/skills) | Claude skill names + descriptions exceed the listing character budget |
+| `skill.no-lockfile` | info | heuristic | _lockfile hygiene, not a requirement_ | Skills present with no skills-lock.json (requireLock only) |
+| `claude.agent.missing-frontmatter` | error | spec-required | [code.claude.com/docs/en/sub-agents](https://code.claude.com/docs/en/sub-agents) | Agent definition has no YAML frontmatter block |
+| `claude.agent.missing-description` | error | spec-required | [code.claude.com/docs/en/sub-agents](https://code.claude.com/docs/en/sub-agents) | Agent frontmatter has no description |
+| `claude.agent.missing-name` | error | spec-required | [code.claude.com/docs/en/sub-agents](https://code.claude.com/docs/en/sub-agents) | Agent frontmatter has no name |
+| `claude.agent.duplicate-name` | error | spec-required | [code.claude.com/docs/en/sub-agents](https://code.claude.com/docs/en/sub-agents) | Agent names are duplicated |
+| `claude.agent.invalid-name` | error | spec-required | [code.claude.com/docs/en/sub-agents](https://code.claude.com/docs/en/sub-agents) | Agent frontmatter name is one Claude Code skips |
+| `claude.mcp.no-launch` | error | spec-required | [code.claude.com/docs/en/mcp](https://code.claude.com/docs/en/mcp) | MCP server declares neither command nor url |
+| `vscode.mcp.no-launch` | error | spec-required | [code.visualstudio.com/docs/agents/reference/mcp-configuration](https://code.visualstudio.com/docs/agents/reference/mcp-configuration) | VS Code MCP server declares neither command nor url |
+| `cursor.mcp.no-launch` | error | spec-required | [cursor.com/docs/context/mcp](https://cursor.com/docs/context/mcp) | Cursor MCP server declares neither command nor url |
+| `antigravity.mcp.no-launch` | error | spec-required | [antigravity.google/docs/mcp](https://antigravity.google/docs/mcp) | Antigravity MCP server declares neither command, serverUrl, nor url |
+| `antigravity.hook.unknown-event` | error | spec-required | [antigravity.google/docs/hooks](https://antigravity.google/docs/hooks) | Antigravity hook registered under an event name that is never dispatched |
+| `antigravity.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Antigravity hook points at a script that does not exist, so it never runs |
+| `antigravity.hook.invalid-group` | error | spec-required | [antigravity.google/docs/hooks](https://antigravity.google/docs/hooks) | Antigravity hook group is missing a hooks array, or matcher is not a string |
+| `antigravity.hook.command-without-command` | error | spec-required | [antigravity.google/docs/hooks](https://antigravity.google/docs/hooks) | Antigravity command hook declares no command |
+| `antigravity.hook.unknown-handler-type` | error | spec-required | [antigravity.google/docs/hooks](https://antigravity.google/docs/hooks) | Antigravity hook handler type is not command |
+| `codex.mcp.no-launch` | error | spec-required | [learn.chatgpt.com/docs/extend/mcp](https://learn.chatgpt.com/docs/extend/mcp) | Codex MCP server declares neither command nor url |
+| `gemini.mcp.no-launch` | error | spec-required | [github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md](https://github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md) | Gemini MCP server declares neither command, url, nor httpUrl |
+| `gemini.mcp.underscore-alias` | warning | vendor-recommendation | [github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md](https://github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md) | Gemini MCP server alias contains an underscore, which can make policies fail silently |
+| `opencode.mcp.no-launch` | error | spec-required | [opencode.ai/v2/docs/mcp-servers](https://opencode.ai/v2/docs/mcp-servers) | OpenCode MCP server declares neither command nor url |
+| `opencode.mcp.missing-type` | error | spec-required | [opencode.ai/v2/docs/mcp-servers](https://opencode.ai/v2/docs/mcp-servers) | OpenCode MCP server is missing type local or remote |
+| `opencode.mcp.local-without-command` | error | spec-required | [opencode.ai/v2/docs/mcp-servers](https://opencode.ai/v2/docs/mcp-servers) | OpenCode local MCP server declares no command |
+| `opencode.mcp.remote-without-url` | error | spec-required | [opencode.ai/v2/docs/mcp-servers](https://opencode.ai/v2/docs/mcp-servers) | OpenCode remote MCP server declares no url |
+| `opencode.mcp.invalid-launch-for-type` | error | spec-required | [opencode.ai/v2/docs/mcp-servers](https://opencode.ai/v2/docs/mcp-servers) | OpenCode MCP server launch field does not match its type |
+| `opencode.mcp.command-not-array` | error | spec-required | [opencode.ai/v2/docs/mcp-servers](https://opencode.ai/v2/docs/mcp-servers) | OpenCode V2 local MCP command is not an argv array |
+| `continue.mcp.no-launch` | error | spec-required | [docs.continue.dev/customize/deep-dives/mcp](https://docs.continue.dev/customize/deep-dives/mcp) | Continue MCP server declares neither command, url, nor uses |
+| `continue.mcp.missing-block-metadata` | error | spec-required | [docs.continue.dev/customize/deep-dives/mcp](https://docs.continue.dev/customize/deep-dives/mcp) | Standalone Continue YAML MCP block is missing name, version, or schema |
+| `commandcode.mcp.no-launch` | error | spec-required | [commandcode.ai/docs/mcp](https://commandcode.ai/docs/mcp) | Command Code MCP server declares neither command nor url |
+| `commandcode.mcp.invalid-transport` | error | spec-required | [commandcode.ai/docs/mcp](https://commandcode.ai/docs/mcp) | Command Code MCP transport is not http or stdio |
+| `commandcode.mcp.http-without-url` | error | spec-required | [commandcode.ai/docs/mcp](https://commandcode.ai/docs/mcp) | Command Code HTTP MCP server declares no url |
+| `commandcode.mcp.stdio-without-command` | error | spec-required | [commandcode.ai/docs/mcp](https://commandcode.ai/docs/mcp) | Command Code stdio MCP server declares no command |
+| `commandcode.hook.unknown-event` | error | spec-required | [commandcode.ai/docs/hooks](https://commandcode.ai/docs/hooks) | Command Code hook registered under an event that is never dispatched |
+| `commandcode.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Command Code hook points at a script that does not exist, so it never runs |
+| `commandcode.hook.invalid-group` | error | spec-required | [commandcode.ai/docs/hooks](https://commandcode.ai/docs/hooks) | Command Code hook group is missing the required nested hooks array, or matcher is not a string |
+| `commandcode.hook.command-without-command` | error | spec-required | [commandcode.ai/docs/hooks](https://commandcode.ai/docs/hooks) | Command Code command hook is missing the command field |
+| `commandcode.hook.unknown-handler-type` | error | spec-required | [commandcode.ai/docs/hooks](https://commandcode.ai/docs/hooks) | Command Code hook uses a handler type other than the required string "command" |
+| `commandcode.hook.timeout-out-of-bounds` | error | spec-required | [commandcode.ai/docs/hooks](https://commandcode.ai/docs/hooks) | Command Code hook timeout is outside 0–600 seconds |
+| `commandcode.agent.reserved-name` | error | spec-required | [commandcode.ai/docs/agents](https://commandcode.ai/docs/agents) | Command Code custom agent uses a reserved name and is ignored |
+| `commandcode.agent.invalid-permission-mode` | error | spec-required | [commandcode.ai/docs/agents](https://commandcode.ai/docs/agents) | Command Code agent permissionMode is not a documented value |
+| `commandcode.agent.invalid-field-type` | error | spec-required | [commandcode.ai/docs/agents](https://commandcode.ai/docs/agents) | Command Code agent field has a type the spec does not accept |
+| `grok.mcp.no-launch` | error | spec-required | [docs.x.ai/build/features/mcp-servers](https://docs.x.ai/build/features/mcp-servers) | Grok MCP server declares neither command nor url |
+| `grok.hook.unknown-event` | error | spec-required | [docs.x.ai/build/features/hooks](https://docs.x.ai/build/features/hooks) | Grok hook registered under an event that is never dispatched |
+| `grok.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Grok hook points at a script that does not exist, so it never runs |
+| `grok.hook.invalid-group` | error | spec-required | [docs.x.ai/build/features/hooks](https://docs.x.ai/build/features/hooks) | Grok hook group is missing the required nested hooks array, or matcher is not a string |
+| `grok.hook.command-without-command` | error | spec-required | [docs.x.ai/build/features/hooks](https://docs.x.ai/build/features/hooks) | Grok command hook is missing the command field |
+| `grok.hook.http-without-url` | error | spec-required | [docs.x.ai/build/features/hooks](https://docs.x.ai/build/features/hooks) | Grok http hook is missing the url field |
+| `grok.hook.unknown-handler-type` | error | spec-required | [docs.x.ai/build/features/hooks](https://docs.x.ai/build/features/hooks) | Grok hook uses a handler type other than command or http, or omits the required type |
+| `grok.skill.missing-frontmatter` | error | spec-required | [docs.x.ai/build/features/skills-plugins-marketplaces](https://docs.x.ai/build/features/skills-plugins-marketplaces) | Grok SKILL.md has no YAML frontmatter block |
+| `mcp.command-missing` | error | internal-consistency | _cross-provider path assertion; docs/spec/mcp.md calls it internal-consistency_ | MCP server command is a path that does not exist on disk |
+| `claude.mcp.url-without-type` | error | spec-required | [code.claude.com/docs/en/mcp](https://code.claude.com/docs/en/mcp) | Remote MCP server has a url but no transport type |
+| `claude.mcp.reserved-name` | error | spec-required | [code.claude.com/docs/en/mcp](https://code.claude.com/docs/en/mcp) | Claude MCP server uses a reserved name that Claude skips at load |
+| `security.hardcoded-secret` | error | security | _cross-provider token-shape judgement, not a quoted rule_ | MCP config contains a token-shaped literal |
+| `mcp.literal-env` | warning | security | [code.claude.com/docs/en/mcp](https://code.claude.com/docs/en/mcp) | MCP env value is a literal secret-shaped key instead of interpolation |
+| `mcp.literal-credential` | warning | security | _cross-provider header judgement; no single vendor page states it_ | MCP headers, http_headers, or auth value is a literal secret instead of interpolation |
+| `budget.agents-md` | info | heuristic | _size hint, not a requirement_ | AGENTS.md longer than the heuristic line budget (>150 lines) |
+| `budget.claude-md` | info | vendor-recommendation | [code.claude.com/docs/en/memory](https://code.claude.com/docs/en/memory) | CLAUDE.md longer than the documented size target (~200 lines) |
+| `budget.agents` | info | heuristic | _size hint, not a requirement_ | More agent definitions than a focused set (>8 files in .claude/agents) |
+| `budget.mcp` | info | heuristic | _size hint, not a requirement_ | Project MCP server count above the point where tool selection may degrade |
+| `codex.budget.instructions` | info | vendor-recommendation | [learn.chatgpt.com/docs/agent-configuration/agents-md](https://learn.chatgpt.com/docs/agent-configuration/agents-md) | Codex AGENTS.md chain exceeds project_doc_max_bytes (32 KiB default) |
+| `cursor.rule.too-large` | info | vendor-recommendation | [cursor.com/docs/rules](https://cursor.com/docs/rules) | Cursor project rule exceeds the 500-line recommendation |
+| `windsurf.rule.too-large` | info | vendor-recommendation | [docs.windsurf.com/windsurf/cascade/memories](https://docs.windsurf.com/windsurf/cascade/memories) | Windsurf workspace rule exceeds the 12,000-character limit |
+| `windsurf.rule.global-too-large` | info | vendor-recommendation | [docs.windsurf.com/windsurf/cascade/memories](https://docs.windsurf.com/windsurf/cascade/memories) | Windsurf global_rules.md exceeds the 6,000-character limit |
+| `windsurf.rule.missing-trigger` | info | spec-required | [docs.windsurf.com/windsurf/cascade/memories](https://docs.windsurf.com/windsurf/cascade/memories) | Windsurf workspace rule is missing frontmatter trigger |
+| `antigravity.rule.missing-trigger` | warning | spec-required | [antigravity.google/docs/rules](https://antigravity.google/docs/rules) | Antigravity modular rule is missing a frontmatter trigger |
+| `antigravity.rule.invalid-trigger` | warning | spec-required | [antigravity.google/docs/rules](https://antigravity.google/docs/rules) | Antigravity modular rule trigger is not always_on, model_decision, glob, or manual |
+| `antigravity.rule.missing-description` | warning | spec-required | [antigravity.google/docs/rules](https://antigravity.google/docs/rules) | Antigravity model_decision rule is missing a description |
+| `antigravity.rule.missing-globs` | warning | spec-required | [antigravity.google/docs/rules](https://antigravity.google/docs/rules) | Antigravity glob rule is missing globs |
+| `antigravity.rule.too-large` | warning | spec-required | [antigravity.google/docs/rules](https://antigravity.google/docs/rules) | Antigravity rule exceeds 24,000 bytes |
+| `windsurf.mcp.no-launch` | error | spec-required | [docs.windsurf.com/windsurf/cascade/mcp](https://docs.windsurf.com/windsurf/cascade/mcp) | Windsurf MCP server declares neither command, serverUrl, nor url |
+| `devin.mcp.no-launch` | error | spec-required | [docs.devin.ai/cli/extensibility/mcp/configuration](https://docs.devin.ai/cli/extensibility/mcp/configuration) | Devin MCP server declares neither command nor url |
+| `windsurf.hook.unknown-event` | warning | spec-required | [docs.devin.ai/desktop/cascade/hooks](https://docs.devin.ai/desktop/cascade/hooks) | Windsurf hook registered under an event name outside the legacy Cascade event table |
+| `windsurf.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Windsurf hook points at a script that does not exist, so it never runs |
+| `windsurf.hook.command-without-command` | error | spec-required | [docs.devin.ai/desktop/cascade/hooks](https://docs.devin.ai/desktop/cascade/hooks) | Windsurf hook declares neither command nor powershell |
+| `devin.hook.unknown-event` | error | spec-required | [docs.devin.ai/cli/extensibility/hooks/overview](https://docs.devin.ai/cli/extensibility/hooks/overview) | Devin hook registered under an event name that is never dispatched |
+| `devin.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Devin hook points at a script that does not exist, so it never runs |
+| `devin.hook.invalid-group` | error | spec-required | [docs.devin.ai/cli/extensibility/hooks/overview](https://docs.devin.ai/cli/extensibility/hooks/overview) | Devin hook group is missing a hooks array |
+| `devin.hook.command-without-command` | error | spec-required | [docs.devin.ai/cli/extensibility/hooks/overview](https://docs.devin.ai/cli/extensibility/hooks/overview) | Devin command hook declares no command |
+| `devin.hook.prompt-without-prompt` | error | spec-required | [docs.devin.ai/cli/extensibility/hooks/overview](https://docs.devin.ai/cli/extensibility/hooks/overview) | Devin prompt hook declares no prompt |
+| `devin.hook.unknown-handler-type` | error | spec-required | [docs.devin.ai/cli/extensibility/hooks/overview](https://docs.devin.ai/cli/extensibility/hooks/overview) | Devin hook handler type is not command or prompt |
+| `codex.hook.unknown-event` | error | spec-required | [learn.chatgpt.com/docs/hooks](https://learn.chatgpt.com/docs/hooks) | Codex hook registered under an event name that is never dispatched |
+| `codex.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Codex hook points at a script that does not exist, so it never runs |
+| `codex.hook.invalid-group` | error | spec-required | [learn.chatgpt.com/docs/hooks](https://learn.chatgpt.com/docs/hooks) | Codex hook group is missing a hooks array, or matcher is not a string |
+| `codex.hook.command-without-command` | error | spec-required | [learn.chatgpt.com/docs/hooks](https://learn.chatgpt.com/docs/hooks) | Codex command hook declares no command |
+| `codex.hook.mcp-tool-without-server-or-tool` | error | spec-required | [learn.chatgpt.com/docs/hooks](https://learn.chatgpt.com/docs/hooks) | Codex MCP tool hook declares no server or tool |
+| `codex.hook.unknown-handler-type` | error | spec-required | [learn.chatgpt.com/docs/hooks](https://learn.chatgpt.com/docs/hooks) | Codex hook handler type is not command, mcp_tool, prompt, or agent |
+| `codex.hook.incompatible-handler` | error | spec-required | [learn.chatgpt.com/docs/hooks](https://learn.chatgpt.com/docs/hooks) | Codex prompt or agent handler is parsed but skipped, or SessionEnd uses mcp_tool |
+| `codex.agent.missing-field` | error | spec-required | [learn.chatgpt.com/docs/agent-configuration/subagents](https://learn.chatgpt.com/docs/agent-configuration/subagents) | Codex custom agent file does not define string name, description, and developer_instructions |
+| `codex.hook.timeout-out-of-bounds` | error | spec-required | [learn.chatgpt.com/docs/hooks](https://learn.chatgpt.com/docs/hooks) | Codex SessionEnd or Interrupt hook timeout is outside 1–3 seconds |
+| `gemini.hook.unknown-event` | error | spec-required | [geminicli.com/docs/hooks](https://geminicli.com/docs/hooks/) | Gemini hook registered under an event that is never dispatched |
+| `gemini.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Gemini hook points at a script that does not exist, so it never runs |
+| `gemini.hook.invalid-group` | error | spec-required | [geminicli.com/docs/hooks](https://geminicli.com/docs/hooks/) | Gemini hook group is missing the required nested hooks array, or matcher is not a string |
+| `gemini.hook.command-without-command` | error | spec-required | [geminicli.com/docs/hooks](https://geminicli.com/docs/hooks/) | Gemini command hook is missing the command field |
+| `gemini.hook.unknown-handler-type` | error | spec-required | [geminicli.com/docs/hooks](https://geminicli.com/docs/hooks/) | Gemini hook omits the required type or uses a value other than command |
+| `cursor.hook.unknown-event` | error | spec-required | [cursor.com/docs/hooks](https://cursor.com/docs/hooks) | Cursor hook registered under an event that is never dispatched |
+| `cursor.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Cursor hook points at a script that does not exist, so it never runs |
+| `cursor.hook.command-without-command` | error | spec-required | [cursor.com/docs/hooks](https://cursor.com/docs/hooks) | Cursor hook is missing the required command field |
+| `cursor.hook.unknown-handler-type` | error | spec-required | [cursor.com/docs/hooks](https://cursor.com/docs/hooks) | Cursor hook declares a type other than command or prompt |
+| `kiro.hook.unknown-event` | error | spec-required | [kiro.dev/docs/ide/whats-new-v1/hooks](https://kiro.dev/docs/ide/whats-new-v1/hooks/) | Kiro hook registered under a trigger that is never dispatched |
+| `kiro.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Kiro command hook points at a script that does not exist, so it never runs |
+| `kiro.hook.command-without-command` | error | spec-required | [kiro.dev/docs/hooks](https://kiro.dev/docs/hooks/) | Kiro command hook is missing the command field |
+| `kiro.hook.prompt-without-prompt` | error | spec-required | [kiro.dev/docs/hooks](https://kiro.dev/docs/hooks/) | Kiro agent hook is missing the required prompt field |
+| `kiro.hook.unknown-handler-type` | error | spec-required | [kiro.dev/docs/hooks](https://kiro.dev/docs/hooks/) | Kiro hook action type is missing or is not command or agent |
+| `kiro.hook.invalid-group` | error | spec-required | [kiro.dev/docs/hooks](https://kiro.dev/docs/hooks/) | Kiro hook file is missing version v1 or a hooks array |
+| `zed.mcp.no-launch` | error | spec-required | [zed.dev/docs/ai/mcp](https://zed.dev/docs/ai/mcp) | Zed context server declares neither command nor url |
+| `amp.mcp.no-launch` | warning | internal-consistency | _agentscan inference_ | Amp MCP server declares neither command nor url |
+| `claude-desktop.mcp.no-launch` | warning | internal-consistency | _agentscan inference_ | Claude Desktop MCP server declares no command |
+| `claude-desktop.extension.missing-field` | warning | spec-required | [raw.githubusercontent.com/anthropics/mcpb/main/MANIFEST.md](https://raw.githubusercontent.com/anthropics/mcpb/main/MANIFEST.md) | Claude Desktop extension manifest lacks a required field or names an unknown server type |
+| `qwen.mcp.no-launch` | error | spec-required | [qwenlm.github.io/qwen-code-docs/en/users/features/mcp](https://qwenlm.github.io/qwen-code-docs/en/users/features/mcp/) | Qwen Code MCP server has neither command, url, nor httpUrl |
+| `qwen.hook.unknown-event` | error | spec-required | [qwenlm.github.io/qwen-code-docs/en/users/features/hooks](https://qwenlm.github.io/qwen-code-docs/en/users/features/hooks/) | Qwen Code hook registered under an event name that is never dispatched |
+| `qwen.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Qwen Code hook points at a script that does not exist, so it never runs |
+| `qwen.hook.command-without-command` | error | spec-required | [qwenlm.github.io/qwen-code-docs/en/users/features/hooks](https://qwenlm.github.io/qwen-code-docs/en/users/features/hooks/) | Qwen Code command hook is missing the command field |
+| `qwen.hook.http-without-url` | error | spec-required | [qwenlm.github.io/qwen-code-docs/en/users/features/hooks](https://qwenlm.github.io/qwen-code-docs/en/users/features/hooks/) | Qwen Code http hook is missing the url field |
+| `qwen.hook.unknown-handler-type` | error | spec-required | [qwenlm.github.io/qwen-code-docs/en/users/features/hooks](https://qwenlm.github.io/qwen-code-docs/en/users/features/hooks/) | Qwen Code hook type is missing or is not command, http, or prompt |
+| `factory.mcp.no-launch` | error | spec-required | [docs.factory.com/harness/mcp](https://docs.factory.com/harness/mcp) | Factory Droid MCP server has neither command nor url |
+| `factory.hook.unknown-event` | error | spec-required | [docs.factory.com/harness/hooks](https://docs.factory.com/harness/hooks) | Factory Droid hook registered under an event name that is never dispatched |
+| `factory.hook.missing-script` | error | internal-consistency | _agentscan inference_ | Factory Droid hook points at a script that does not exist, so it never runs |
+| `factory.hook.invalid-group` | error | spec-required | [docs.factory.com/harness/hooks](https://docs.factory.com/harness/hooks) | Factory Droid hook group has no hooks array |
+| `factory.hook.command-without-command` | error | spec-required | [docs.factory.com/harness/hooks](https://docs.factory.com/harness/hooks) | Factory Droid command hook is missing the command field |
+| `factory.hook.unknown-handler-type` | error | spec-required | [docs.factory.com/harness/hooks](https://docs.factory.com/harness/hooks) | Factory Droid hook type is missing or is not command |
+| `factory.droid.invalid-name` | error | spec-required | [docs.factory.com/harness/subagents](https://docs.factory.com/harness/subagents) | Factory custom droid name is missing or does not match ^[a-z0-9-_]+$ |
+| `factory.droid.empty-body` | error | spec-required | [docs.factory.com/harness/subagents](https://docs.factory.com/harness/subagents) | Factory custom droid has an empty system prompt body |
+| `goose.mcp.no-launch` | error | spec-required | [goose-docs.ai/docs/guides/config-files](https://goose-docs.ai/docs/guides/config-files/) | Goose extension declares type sse, which Goose does not support |
+<!-- rules:end -->
+
+### Coverage in 2.0.0
 
 Each cell is one coverage dimension. There is no `full` / `partial` label: a
 documented global or static location that is not opened stays **unread**.
@@ -548,29 +645,28 @@ Dimensions:
 
 | Ecosystem | project discovery | global discovery | schema | precedence | conformance |
 |-----------|-------------------|------------------|--------|------------|-------------|
-| Agent Skills | `.agents/skills` (and Cursor / Codex / Command Code skill trees) | `--global` `~/.agents/skills`, `~/.codex/skills` | required `name` / `description` plus optional `compatibility` / `metadata` / `allowed-tools`; 500-line info | n/a | `agent-skills` fixture |
+| Agent Skills | `.agents/skills` (and Cursor / Codex / Command Code skill trees). Default `skills/` uses the Claude schema, not this contract | `--global` `~/.agents/skills` (Codex reads its user skills here) | required `name` / `description` plus optional `compatibility` / `metadata` / `allowed-tools`; 500-line info | n/a | `agent-skills` fixture |
 | AGENTS.md | nested walk-up | n/a | no required fields | nearest-wins | tests |
-| Claude Code | project settings, skills, agents, `CLAUDE.md`, `.mcp.json` / `.claude/mcp.json` | unread `~/.claude/settings.json`, managed policy, marketplace plugins | 33 events; required handler `type`; MCP reserved names; first-paragraph skill description; listing budget | walk-up `CLAUDE.md` / `.claude/agents` | `claude-json` fixture |
+| Claude Code | project settings, skills, agents, commands, `CLAUDE.md`, `.mcp.json` / `.claude/mcp.json`; in-tree plugin hooks / skills / agents / commands / `.mcp.json` | `--global` `$CLAUDE_CONFIG_DIR` or `~/.claude` (skills, settings, agents, `CLAUDE.md`, rules, commands) and `$CLAUDE_CONFIG_DIR/.claude.json` or `~/.claude.json` (user + matching local `mcpServers`); unread managed policy, marketplace plugins, other projects' local MCP | 33 events; required handler `type`; MCP reserved names; first-paragraph skill description; listing budget | walk-up `CLAUDE.md` / `.claude/agents` / `.claude/commands`; user+project+local layers inventoried | `claude-json` fixture |
 | Command Code | git-root project files; per-directory `AGENTS.md` else `.commandcode/AGENTS.md` | `--global` `~/.commandcode/*`; unread `projects/{slug}/mcp.json` | 4 events; command handlers; Agent Skills; MCP `transport` / `type` | settings merge; project+user hooks coexist; skill/MCP shadow | `commandcode` fixture |
-| Codex | `.codex/config.toml`, `.codex/skills`, AGENTS chain | `--global` `$CODEX_HOME` / `~/.codex/config.toml` MCP; `AGENTS.override.md` then `AGENTS.md`; unread system, managed, requirements, profiles, plugins, trust | TOML MCP; `project_doc_max_bytes`; Agent Skills | override > `AGENTS.md` > fallbacks; one file per dir; root→cwd; `project_root_markers`; MCP user+project both inventoried | `codex-toml` fixture |
-| VS Code | `.github/hooks` without `version: 1`, instruction files, `.github/agents`, `.vscode/mcp.json` | `--global` `~/.copilot/hooks` without `version: 1`; unread policy dirs | 8 events; command-only | workspace over user | `vscode-hooks`, `vscode-json` |
-| Copilot CLI | `.github/hooks` with `version: 1` | `--global` `~/.copilot/hooks` with `version: 1`; unread `/etc/github-copilot/policy.d` | camelCase + PascalCase map; `bash` / `powershell` / `command`; `cwd`; `timeoutSec`; prompt on `sessionStart` | documented sources coexist; policy unread | `copilot-hooks` fixture |
-| Cursor | nested `.cursor/skills`, `.cursor/mcp.json`, `.cursor/rules` | unread documented Cursor user/global paths | Agent Skills; MCP launch; 500-line rules | n/a | `cursor-json` fixture |
+| Codex | `.codex/hooks.json` and inline `[hooks]` in `.codex/config.toml` on the ancestor walk; skills from `.agents/skills`; AGENTS chain | `--global` `$CODEX_HOME` / `~/.codex` `hooks.json` and `config.toml` (MCP and `[hooks]`); `AGENTS.override.md` then `AGENTS.md`; unread system, managed, requirements, profiles, plugins, trust | 14 hook events; `command` / `mcp_tool`; `prompt` and `agent` parsed but skipped; SessionEnd rejects `mcp_tool`; SessionEnd and Interrupt timeout 1–3; TOML MCP; `project_doc_max_bytes`; Agent Skills | both hook files in a layer are inventoried; trust is not modeled; override > `AGENTS.md` > fallbacks; one file per dir; root→cwd; `project_root_markers`; MCP user+project both inventoried | `codex-hooks`, `codex-toml` fixtures |
+| VS Code | `.github/hooks` without `version: 1` (legacy Local), instruction files, `.github/agents` (frontmatter hooks as vscode-native), `.vscode/mcp.json` `servers` | `--global` `~/.copilot/hooks` without `version: 1`; unread policy dirs; unread marketplace plugin `hooks.json` (install path unpublished) | 8 PascalCase events; command-only. New Copilot hooks are the Copilot row | workspace over user | `vscode-hooks`, `vscode-json` |
+| Copilot CLI | `.github/hooks` with `version: 1`; inline `hooks` in `.github/copilot/settings.json` and `settings.local.json`; `.github/mcp.json` (`mcpServers`) | `--global` `$COPILOT_HOME` / `~/.copilot/hooks` with `version: 1`, `settings.json`, and `mcp-config.json` (`mcpServers`); unread `/etc/github-copilot/policy.d` | camelCase + PascalCase map; `bash` / `powershell` / `command` / `exec` / `http`; `cwd`; `timeoutSec`; prompt on `sessionStart`; user MCP `command` / `url` | documented sources coexist; policy unread; Copilot also reads `.claude/settings.json` but this scanner lints that file as Claude. Workspace `.mcp.json` stays the shared profile | `copilot-hooks` fixture |
+| Cursor | nested `.cursor/skills`; `.cursor/mcp.json`, `.cursor/hooks.json` and `.cursor/rules` on the ancestor walk only (not descendant package trees from repo root) | `--global` `~/.cursor/hooks.json` and `~/.cursor/mcp.json`; `~/.cursor/skills`; unread MDM/team hooks; unread third-party Claude import as Cursor schema | Agent Skills; MCP launch; 500-line rules; 21 hook events, optional `type` (`command` / `prompt`), required `command`. Missing `version` is not a finding | n/a | `cursor-json` fixture |
 | Grok | `.grok/config.toml` walk-up; `.grok/hooks/*.json`; `.grok/skills`; `.grok/rules/*.md`; `Agents.md` / `AGENT.md` | `--global` `$GROK_HOME` or `~/.grok` config/hooks/skills; unread managed, requirements, plugins, `[skills] paths`, agents, credentials | `command` / `url` MCP (no `type`); 14 events; command/http; frontmatter required, name/description optional; no rules cap | closer project wins; project same-name replaces user | `grok-toml` fixture |
-| Antigravity | `.agents/mcp_config.json` | none | `serverUrl` launch | n/a | `antigravity-json` fixture |
-| Gemini | `.gemini/settings.json` | unread `~/.gemini/settings.json` unless `--global` is wired for it (it is not) | `command` / `url` / `httpUrl`; underscore-alias warning | n/a | `gemini-json` fixture |
-| Windsurf | `.devin/rules/*.md` (preferred), `.windsurf/rules/*.md` (fallback), `.windsurfrules`; portable `AGENTS.md` / `agents.md` | `--global` `~/.codeium/windsurf/mcp_config.json` and `~/.codeium/windsurf/memories/global_rules.md`; unread auto memories, Devin CLI MCP, system `/etc/devin/rules` | 12k / 6k character rules; workspace `trigger`; MCP `command` / `serverUrl` / `url` (no `type`) | n/a (no project MCP; both rule trees inventoried) | `windsurf-rules` fixture |
-| Kiro | none | none | none | n/a | none |
-| Cline | none | none | none | n/a | none |
-| Roo | none | none | none | n/a | none |
-| Kilo | none | none | none | n/a | none |
+| Antigravity | `.agents/mcp_config.json`; `.agents/hooks.json`, `GEMINI.md`, `.agents/GEMINI.md`, `.agents/rules/*.md`, and legacy `.agent/rules/*.md` on the ancestor walk. Workspace `AGENTS.md` stays the AGENTS.md row. `.agents/skills` stays the Agent Skills row | `--global` `~/.gemini/config` `mcp_config.json`, `hooks.json`, `rules/*.md`, `skills/`, `AGENTS.md`, and `GEMINI.md`, plus `~/.gemini/AGENTS.md` and `GEMINI.md`. Unread plugin hooks, plugin rules, plugin skills, `~/.gemini/antigravity-cli/settings.json`, `~/.gemini/antigravity-cli/skills/`, `~/.gemini/skills/`, and `~/.gemini/antigravity/skills/` | `command` / `serverUrl` (`url` is an alias; `httpUrl` is not a launch field); 6 hook events; direct handlers or matcher groups; `type` defaults to `command`; modular rule `trigger`; 24,000-byte rule limit | n/a | `antigravity-json`, `antigravity-hooks` fixtures |
+| Gemini | `.gemini/settings.json` — MCP and `hooks` | `--global` `~/.gemini/settings.json` (hooks and MCP together); unread `/etc/gemini-cli/settings.json`, extension hooks, and `mcp-oauth-tokens.json` | `command` / `url` / `httpUrl`; underscore-alias warning; 11 hook events, required `type` (`command` only), nested groups, `$GEMINI_PROJECT_DIR` | n/a | `gemini-json` fixture |
+| Windsurf | `.devin/rules/*.md` (preferred), `.windsurf/rules/*.md` (fallback), `.windsurfrules`; `.windsurf/hooks.json`; `.windsurf/skills`; portable `AGENTS.md` / `agents.md` | `--global` `~/.codeium/windsurf/mcp_config.json`, `memories/global_rules.md`, `hooks.json`, and `skills`; unread auto memories, system rules/hooks/skills, JetBrains `~/.codeium/hooks.json` | 12k / 6k character rules; workspace `trigger`; MCP `command` / `serverUrl` / `url` (no `type`); 12 snake_case hook events; `command` / `powershell`; Agent Skills on `.windsurf/skills` | n/a (no project MCP on this row; both rule trees inventoried). Devin CLI hooks and MCP are the next row | `windsurf-rules` fixture |
+| Devin CLI | `.devin/hooks.v1.json`; `"hooks"` in `.devin/config.json` and `config.local.json`; `.devin/mcp_config.json` and `mcp_config.local.json`; `mcpServers` left in those config files; `.devin/skills` | `--global` `~/.config/devin/config.json`, `mcp_config.json`, and `skills`; unread Windows `%APPDATA%\devin` | 8 events (`PostCompaction`, not `PostCompact`); `command` / `prompt`; MCP `command` / `url` (`transport` `http` or `sse` is not a check); Agent Skills | Claude settings Devin also loads stay Claude findings | unit tests |
+| Kiro | `.kiro/hooks/*.json`, `.kiro/skills`, `.kiro/agents/**/*.json` and `*.md` on the ancestor walk | `--global` `~/.kiro/hooks/`, `~/.kiro/skills`, `~/.kiro/agents/` | 13 PascalCase triggers, including `SessionEnd`, `PreCompact`, `PostCompact`; `command` / `agent`; Agent Skills. Agents are inventory only: the name is the relative path without the extension, and no field is required | nearer workspace agent shadows a farther one and a global one with the same name | unit tests |
+| Cline | `.cline/skills`, `.clinerules/skills` | `--global` `~/.cline/skills`; unread hooks (no quoted event list), unread agents | Agent Skills | n/a | unit tests |
+| Roo | `.roo/skills` | `--global` `~/.roo/skills` | Agent Skills | n/a | unit tests |
+| Kilo | `.kilo/skills` | `--global` `~/.kilo/skills`; unread extra paths in `kilo.jsonc` | Agent Skills | n/a | unit tests |
 | OpenCode | `opencode.json(c)` V1 and V2 | none | V2 local `command` must be an argv array | n/a | `opencode-json` fixture |
-| Junie | none | none | none | n/a | none |
+| Junie | `.junie/skills` | `--global` `~/.junie/skills`; unread `--skill-location` / extension skills | Agent Skills with optional `description`; `name` need not match the folder | n/a | unit tests |
 | Continue | `.continue/config.yaml`, `.continue/mcpServers/*` | none | launch `command` / `url` / `uses`; standalone YAML `name` / `version` / `schema` | n/a | `continue-yaml`, `continue-mcpservers` |
 
-Cursor project rules (`.cursor/rules/**/*.mdc`) are a separate surface: discovery plus `cursor.rule.too-large` at info. Claude `.claude/rules/**/*.md` is inventoried and has no published line budget. Windsurf workspace rules use a 12,000-character budget (`windsurf.rule.too-large`); do not apply the Cursor 500-line check. Portable `AGENTS.md` / `agents.md` stay `sourceProvider: unknown` — this scanner does not claim exclusive Windsurf ownership.
-
-Old 0.7 rule ids still work in `ignoreRules` and `explain` (for example `hook.missing-script` aliases `claude.hook.missing-script`).
+Cursor project rules (`.cursor/rules/**/*.mdc`) are a separate surface: discovery plus `cursor.rule.too-large` at info. Claude `.claude/rules/**/*.md` is inventoried and has no published line budget. Windsurf workspace rules use a 12,000-character budget (`windsurf.rule.too-large`); do not apply the Cursor 500-line check. Antigravity modular rules require `trigger` and a raw file over 24,000 bytes is `antigravity.rule.too-large`. Portable `AGENTS.md` / `agents.md` stay `sourceProvider: unknown` — this scanner does not claim exclusive Windsurf or Antigravity ownership.
 
 Agent definitions are checked for structure only. A Claude agent's frontmatter
 `name` is not compared to the filename; it must be lowercase letters and
@@ -591,21 +687,32 @@ illustration, not a pointer.
 ### Where it looks for hooks
 
 The Claude hooks reference lists seven places a hook can be registered. agentscan
-reads the four that live inside the scanned project, plus VS Code workspace hooks
-and Command Code settings hooks:
+reads the project settings files, in-tree plugin and command-file hooks,
+`~/.claude/settings.json` (or `$CLAUDE_CONFIG_DIR/settings.json`)
+under `--global`, plus VS Code workspace hooks and Command Code settings hooks:
 
 | Registered in | Script paths resolve against |
 |---|---|
 | `.claude/settings.json` · `.claude/settings.local.json` | project root, `${CLAUDE_PROJECT_DIR}` |
+| `~/.claude/settings.json` (or `$CLAUDE_CONFIG_DIR/settings.json`) under `--global` | scanned project root, `${CLAUDE_PROJECT_DIR}` |
 | A plugin's `hooks/hooks.json` (a directory with `.claude-plugin/plugin.json`, or the scan root itself) | the plugin root, `${CLAUDE_PLUGIN_ROOT}` |
-| `SKILL.md` frontmatter | the skill's own directory, then the project root |
+| `SKILL.md` frontmatter (including in-tree plugin skills) | the skill's own directory, then the project root |
+| `.claude/commands/*.md` frontmatter | the command file's directory, then the project root |
 | `.claude/agents/*.md` frontmatter | the agent file's directory, then the project root |
 | `.github/hooks/*.json` without `version: 1` (native VS Code) | project root and the hooks directory |
 | `.github/hooks/*.json` with `version: 1` (Copilot CLI) | project root, `cwd`, host `bash` / `powershell` / `command` |
-| `~/.copilot/hooks` under `--global` | same split on `version: 1` |
+| `.github/copilot/settings.json` · `.github/copilot/settings.local.json` (Copilot CLI inline) | project root and the settings directory; always `copilot-cli` |
+| `~/.copilot/hooks` and `~/.copilot/settings.json` (or `$COPILOT_HOME/…`) under `--global` | same Copilot CLI / native VS Code split on hook files; settings hooks are always `copilot-cli` |
 | `.commandcode/settings.json` · `.commandcode/settings.local.json` (and user settings under `--global`) | Command Code project root (git root, or cwd outside a git repo), `$COMMANDCODE_PROJECT_DIR`, `$COMMANDCODE_CWD` |
 | `.grok/hooks/*.json` | project root and the hooks directory |
 | `$GROK_HOME/hooks` or `~/.grok/hooks` under `--global` | same Grok 14-event / command-or-http split |
+| `.github/agents/*.agent.md` frontmatter | vscode-native (command-only); project root and the agent file's directory |
+| `.kiro/hooks/*.json` | project root; array-of-hooks, not Claude event-keyed objects |
+| `~/.kiro/hooks/` under `--global` | scanned project root |
+| `.cursor/hooks.json` | project root |
+| `~/.cursor/hooks.json` under `--global` | scanned project root |
+| `.gemini/settings.json` `hooks` | project root, `$GEMINI_PROJECT_DIR` |
+| `~/.gemini/settings.json` `hooks` under `--global` | scanned project root, `$GEMINI_PROJECT_DIR` |
 
 `${CLAUDE_PLUGIN_ROOT}` is expanded **only** for a hook that came from a plugin.
 In a settings file it names nothing, so the path is skipped rather than guessed
@@ -641,8 +748,8 @@ first.
   should add a `next-*` skill". That needed a hand-maintained registry, and the
   version that existed fired on none of the 17 projects measured, so it was
   removed. Skill provenance comes from `skills-lock.json` instead.
-- **No rule produces `refresh` or `keep`.** Comparing a skill's content against
-  the `computedHash` in `skills-lock.json` is the obvious `refresh` source; the
+- **No skill-content hash check.** Comparing a skill's content against
+  the `computedHash` in `skills-lock.json` is the obvious source of one; the
   hash algorithm used by the installing tool is not documented here, and it is
   not reproducible from `SKILL.md` bytes alone, so it is not implemented.
 - **Runtime split.** Source development and the composite Action use Bun; the
@@ -661,39 +768,97 @@ first.
   still inspect every readable MCP file.
 - **Codex admin and profile layers are unread.** System `/etc/codex/config.toml`,
   managed preferences, `requirements.toml`, `$CODEX_HOME/<name>.config.toml`
-  profiles, plugin MCP, and `trust_level` are not opened. User
-  `$CODEX_HOME/config.toml` (or `~/.codex/config.toml`) MCP is scanned only
-  under `--global`. `auth.json` is never opened. Same-name user and project
-  MCP servers are both inventoried — the published page does not quote a
+  profiles, plugin hooks and MCP, and `trust_level` are not opened. Project
+  `.codex/hooks.json` and inline `[hooks]` in `.codex/config.toml` are
+  inventoried on the ancestor walk even when that layer is untrusted. The
+  same two files under `$CODEX_HOME` (or `~/.codex`) are opened only with
+  `--global`. `auth.json` is never opened. Same-name user and project MCP
+  servers are both inventoried — the published page does not quote a
   replace-entirely rule. User-file `project_doc_*` knobs are not applied.
+  Relative hook commands resolve against the scanned directory, not the git
+  root. SessionEnd and Interrupt timeouts outside 1–3 seconds are findings;
+  other events have no quoted maximum.
 - **Command Code local MCP is unread.** `~/.commandcode/projects/{project}/mcp.json`
   is keyed by a working-directory slug that the sessions page does not publish.
   Until it does, that path is skipped rather than guessed. Bundled Command Code
   skills and `--skill` launch flags are not project files and are not scanned.
-  `mods.paths` are inventoried; the TypeScript is never executed or imported.
+  Command Code `mods` settings are not read, and mod TypeScript is never
+  executed or imported.
   `auth.json` and `mcp-tokens.json` are never opened. Command Code project
   root is the git root (or cwd outside a git repo); a child `.cursor` does
   not hide `<git-root>/.commandcode/`. Spec/runtime Command Code checks skip
   shadowed lower-precedence definitions; secrets still inspect every readable
   MCP file.
-- **Three Claude hook locations are unread.** `~/.claude/settings.json`, managed policy
-  settings, and installed marketplace plugins under `~/.claude/plugins` all sit
-  outside the scanned project, and the docs say a plugin's install directory
-  changes on every update. A hook registered in one of those, pointing at a
-  missing script, is not reported.
+- **Two Claude hook locations stay unread.** Managed policy settings and
+  installed marketplace plugins under `~/.claude/plugins` sit outside the
+  scanned project, and the docs say a plugin's install directory changes
+  on every update. A hook registered in one of those, pointing at a
+  missing script, is not reported. User settings, skills, agents,
+  `CLAUDE.md`, rules, and commands under `$CLAUDE_CONFIG_DIR` or
+  `~/.claude` are scanned only under `--global`. User `~/.claude.json`
+  MCP is scanned only under `--global`: top-level `mcpServers` and
+  `projects.<scanned-path>.mcpServers`. Other projects' local servers
+  are skipped. A file without those keys is skipped, not
+  `config.unreadable`. In-tree plugin skills, agents, commands, and
+  `.mcp.json` are read; plugin agent frontmatter hooks are ignored
+  because Claude skips them.
+- **Default `skills/` is Claude schema.** A repo-root `skills/` directory is
+  discovered, but `name` / directory-match from the Agent Skills spec are not
+  applied there. `.agents/skills`, `.cursor/skills`,
+  `.commandcode/skills`, `.kiro/skills`, `.cline/skills`, `.clinerules/skills`, `.roo/skills`,
+  `.kilo/skills`, and `.junie/skills` use the Agent Skills contract. Junie
+  does not require `description` and does not require `name` to match the
+  folder.
 - **Copilot CLI policy hooks are unread.** `/etc/github-copilot/policy.d` and the
   Windows policy directory are machine-wide admin files. User
-  `~/.copilot/hooks` is scanned only under `--global`. Inline Copilot
-  `.github/copilot/settings.json` hooks are unread.
-- **Gemini user settings are unread.** `~/.gemini/settings.json` is outside a
-  normal project scan.
+  `~/.copilot/hooks` and `~/.copilot/settings.json` (or `$COPILOT_HOME/…`)
+  are scanned only under `--global`. Plugin `hooks.json` stays unread.
+  Copilot also reads repository `.claude/settings.json`; this scanner still
+  lints that file as Claude (required nested groups and required `type`).
+  Copilot-only event names there stay `claude.hook.unknown-event`.
+- **Gemini system settings are unread.** `~/.gemini/settings.json` (hooks and
+  MCP together) is scanned only under `--global`. `/etc/gemini-cli/settings.json`
+  and extension-provided hooks stay unread. `mcp-oauth-tokens.json` is never
+  opened.
+- **Cursor managed hooks are unread.** `~/.cursor/hooks.json` is scanned only
+  under `--global`. MDM paths (`/etc/cursor/hooks.json` and the macOS /
+  Windows equivalents) and dashboard-synced team hooks stay unread. Cursor's
+  third-party import of Claude hook files stays on the Claude profile.
+- **Antigravity global files.** `~/.gemini/config/mcp_config.json`,
+  `hooks.json`, `rules/*.md`, `skills/`, `AGENTS.md`, and `GEMINI.md`, plus
+  `~/.gemini/AGENTS.md` and `~/.gemini/GEMINI.md`, are scanned only under
+  `--global`. Project `.agents/mcp_config.json`, `.agents/hooks.json`,
+  `GEMINI.md`, `.agents/GEMINI.md`, `.agents/rules/*.md`, and legacy
+  `.agent/rules/*.md` are read on the ancestor walk. Workspace `AGENTS.md`
+  stays the portable policy file, so the 24,000-byte rule check does not
+  apply to it. That check counts raw bytes, before `@[label](path)`
+  expansion, and the 20,000-token aggregate is not checked. `rules.json`
+  paths are not followed. `url` is an alias of `serverUrl`. `httpUrl` alone
+  is still not a launch field. Plugin hooks, plugin rules, plugin skills,
+  `~/.gemini/antigravity-cli/settings.json`,
+  `~/.gemini/antigravity-cli/skills/`, `~/.gemini/skills/`, and
+  `~/.gemini/antigravity/skills/` stay unread. Hook `timeout` has no quoted
+  range, so it is not checked. Global skills use the Agent Skills contract,
+  which requires `name` even though the Antigravity skills page says `name`
+  defaults to the folder.
+- **Cline hooks stay unread.** Cline's hooks page did not quote an event
+  identifier table. Cline agents are unread for the same reason. Kiro agents
+  are inventoried from `.kiro/agents/**/*.json` and `*.md` on the ancestor
+  walk, and from `~/.kiro/agents/` under `--global`. The name is the path
+  relative to the agents directory without the extension. A nearer workspace
+  agent shadows a farther one and a global one with the same name. No field
+  is required, so there is no `kiro.agent.*` check.
+- **VS Code marketplace plugin hooks are unread.** In-tree Claude plugins
+  stay Claude. VS Code's `hooks.json` / `hooks/hooks.json` inside an
+  installed plugin package is not a project path.
 - **Windsurf Devin CLI MCP and auto memories are unread.** Cascade MCP is
   global-only (`~/.codeium/windsurf/mcp_config.json`, `--global`). The Devin
   Local agent uses unpublished CLI config files — that path is not guessed.
   Auto-generated files under `~/.codeium/windsurf/memories/` other than
-  `global_rules.md` are not opened. System / enterprise rule directories
-  (`/etc/devin/rules`, `/etc/windsurf/rules`) stay unread. There is no
-  quoted project MCP path.
+  `global_rules.md` are not opened. System / enterprise rule, hook, and
+  skill directories (`/etc/devin/rules`, `/etc/windsurf/rules`,
+  `/etc/windsurf/hooks.json`, `/etc/windsurf/skills/`) stay unread. There
+  is no quoted project MCP path. JetBrains `~/.codeium/hooks.json` is unread.
 - **Bounded reads.** A `SKILL.md` is read to 64 KB and a policy file to 100 KB,
   so `skill.broken-reference` and `policyLines` see only that much of a larger
   file. This is reported — `scan.truncated`, at `info` — rather than left
@@ -707,6 +872,37 @@ Notes for every published version are in [CHANGELOG.md](CHANGELOG.md).
 GitHub already has pages for [v0.1.0](https://github.com/SimaAlexandru99/agentscan/releases/tag/v0.1.0)
 and [v0.4.0](https://github.com/SimaAlexandru99/agentscan/releases/tag/v0.4.0).
 
+**2.3.1** (14 November 2026) stops reading Codex's `[hooks.state]` trust
+record as a hook group.
+
+**2.3.0** (14 November 2026) adds Claude Desktop, Amp, Zed, Qwen Code,
+Goose and Factory Droid; see the changelog.
+
+**2.2.0** (14 November 2026) aligns every surface with the vendor docs
+re-read that day and adds `codex.agent.missing-field`; see the changelog.
+
+**2.1.0** (14 November 2026) cuts false findings on home-directory and
+`--global` scans; see the changelog. No rule id changed.
+
+**2.0.0** (12 November 2026) is breaking for configs that still name the 0.7
+rule ids or the old threshold keys. `ignoreRules`, `ignoreFindings`, and
+`explain` accept only the printed ids. `thresholds.skillDescriptionBytes`
+and `thresholds.skills` are rejected; the listing budget is
+`thresholds.skillListingChars`. It also ships the November 2026 vendor
+contracts: Kiro agents, Antigravity rules, skills, and hooks, Codex hooks,
+Cursor user MCP, Devin CLI hooks / MCP / skills, and the Copilot user MCP
+file. **143 checks**, **647 tests**.
+
+**1.4.0** (2 September 2026) closes two coverage gaps and ships the
+2026-09-02 re-verification: Copilot CLI inline `hooks` in
+`.github/copilot/settings.json` / `settings.local.json` and `--global`
+`$COPILOT_HOME` / `~/.copilot/settings.json`; `mcp.literal-credential` on
+MCP `headers` / `http_headers` / `auth` (field paths only). Also the
+seven false-positive corrections, spec content hashes, verbatim
+conformance fixtures, and Windsurf Cascade hooks / skills from #13.
+**103 checks**, **532 tests**. Policy hooks, plugin `hooks.json`, and
+`.claude/settings.json` as Copilot stay unread.
+
 **1.3.0** (31 August 2026) adds native Windsurf / Cascade coverage: workspace
 `.devin/rules` and `.windsurf/rules`, portable `agents.md`, and `--global`
 `mcp_config.json` plus `global_rules.md`. Devin CLI MCP, auto memories,
@@ -760,7 +956,9 @@ Before publishing a release:
 
 1. Confirm `package.json` and `src/version.ts` contain the same version.
 2. Run `bun run build`, then verify `node dist/cli.js --version` prints it.
-3. Run `bun run typecheck`, `bun test`, and `bun run spec:check`.
+3. Run `bun run typecheck`, `bun test`, and `bun run spec:check`. If a page
+   hash changed, re-read that page, update its `docs/spec/` capture and the
+   conformance fixture, then `bun run spec:record`.
 4. Refresh the test-count badge and version examples above from that release run.
 5. Add a section to [CHANGELOG.md](CHANGELOG.md) for the version, then publish
    the GitHub release from that text.