Agent Instruction-File Poisoning Scanner

Hunts planted or tampered agent instruction files (AGENTS.md, CLAUDE.md, GEMINI.md, .cursor/rules, .windsurfrules, copilot-instructions.md) across every directory a coding agent can inherit context from — Downloads, home, parent folders, fresh clones — after the October 2026 Forever Security disclosure showed a 13 KB 'engineering guidelines' AGENTS.md made Codex install npm malware in >90% of runs and redirected Claude Code API traffic to steal login tokens about half the time. Produces a risk-scored findings table, a portable lint ruleset for CI and pre-session hooks, a safe-launch-directory policy, and a token-rotation incident runbook