{
  "source": "catalog/cisco-mcp-scanner/entry.yaml, privileges.declared, copied unchanged (author statements at the pinned commit)",
  "method": "reach-v0.1",
  "axes": {
    "fs": 1,
    "net": 1,
    "exec": 2,
    "cred": 3
  },
  "evidence": {
    "fs": "claude-code-plugin/skills/security-scan/SKILL.md#L62-66 author lists the home-directory MCP client config files the known-config scan reads",
    "net": "claude-code-plugin/skills/security-scan/SKILL.md#L197-199 author names the Cisco AI Defense API endpoint for the api analyzer",
    "exec": "claude-code-plugin/skills/security-scan/SKILL.md#L74-89 author documents that the scanner launches a user-chosen stdio server command",
    "cred": "claude-code-plugin/skills/security-scan/SKILL.md#L213-216 author documents authenticating the LLM analyzer with a named AWS profile, which reads the local AWS credential store"
  }
}