Agent & Automation Guide

git diff --staged | snip audit --format json
git diff --staged | snip audit -q || echo "Security violation detected"

// claude_desktop_config.json or ~/.cursor/mcp.json
{ "mcpServers": { "snip": { "command": "snip", "args": ["serve", "--mcp"] } } }

# studio2201 Autonomous Security Rules (.cursorrules / CLAUDE.md)
- Run 'studio2201 check' before completing tasks to audit diffs, manifests, and crypto.
- If Snip emits exit code 1 (Block/Fix): remediate leaked secrets, broken RLS, or permissive CORS.
- If Vigil emits exit code 1: reject dormant packages (>180d) in package.json, Cargo.lock, or pyproject.toml.
- If Aegis emits exit code 1: upgrade classical cryptography to NIST PQC standards (ML-KEM, ML-DSA).

# Reference template: .github/workflows/<tool>.yml (snip, vigil, aegis, proven, boneyard)
name: snip
on:
  push: { branches: [ master, main ] }
  pull_request: { branches: [ master, main ] }
  workflow_dispatch:
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
permissions: { contents: read }
jobs:
  snip:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with: { fetch-depth: 0 }
      - uses: studio2201/studio2201@v1
        with: { tools: 'snip', fail-on: 'block' }
      - uses: actions/upload-artifact@v4
        if: always()
        with: { name: snip-report, path: snip_report.md, if-no-files-found: ignore }