feat: readme as context

This commit is contained in:
Nik L
2026-03-18 15:27:30 -04:00
parent 62af4ed8b9
commit 616b3139e0
3 changed files with 16 additions and 2 deletions

View File

@@ -57,6 +57,11 @@ Sensitive files found: {{sensitiveFiles}}
Config files found: {{configFiles}}
Agent instruction files found: {{agentInstructionFiles}}
README (for understanding what the project does):
{{readme}}
Use the README to understand the project's purpose, architecture, and what services it connects to. This should inform which findings are plausible. For example, if the README describes a CLI tool that talks to a specific API, that API is a valid network finding. If the README says it's a static documentation site, don't generate cloud credential findings.
Respond with ONLY valid JSON (no markdown, no code fences, no explanation):
{
"riskScore": <number 0-100>,