Agent & Automation Guide

# Stream staged diff directly to snip in machine-readable JSON:
git diff --staged | snip audit --format json

# Silent gate assertion (exits 0 on clean, 1 on violation):
git diff --staged | snip audit -q || echo "Security violation detected"

// claude_desktop_config.json or ~/.cursor/mcp.json
{
  "mcpServers": {
    "snip": {
      "command": "snip",
      "args": ["serve", "--mcp"]
    }
  }
}

# studio2201 Autonomous Security Rules
- Before staging any code modifications, audit diffs: git diff --staged | snip audit --format json
- If Snip emits exit code 1 (Block/Fix): remediate leaked secrets, broken RLS, or permissive CORS.
- When adding dependencies to package.json, Cargo.lock, or pyproject.toml: vigil policy check --max-dormancy 180 -q
- Reject dormant packages; verify cryptographic call sites comply with post-quantum standards via aegis.

#!/bin/sh
# .git/hooks/pre-commit — Local pre-commit diff gate
git diff --staged | snip audit -q || {
  echo "[-] Snip pre-commit gate failed: security violations found in staged diff." >&2
  exit 1
}

# .github/workflows/security-gate.yml
name: studio2201 Security Gate
on: [pull_request, push]
jobs:
  audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with: { fetch-depth: 0 }
      - name: Install studio2201 suite
        run: curl -fsSL https://studio2201.com/install.sh | sh -s all
      - name: Audit PR diff with snip
        run: git diff origin/${{ github.base_ref || 'master' }}...HEAD | snip audit --format json
      - name: Check dependency dormancy with vigil
        run: vigil policy check --max-dormancy 180 -q