review-github-pr

The strongest counter is that consulting a maintenance map is ordinary review workflow, but the skill body verbatim instructs the agent to apply the `sync-agent-infra` maintenance map and a full consistency checklist whose content is neither shipped nor declared anywhere in the shown evidence, and per the pass rules an instruction to apply content the artifact does not ship is not neutralized by the file being absent or benign-looking, so no gate refutes the finding.

The skill body contains the cited reference directing the agent to check review criteria against CRYPTO.md at runtime; no shown evidence ships or declares that file's content, and the possibility that the file is missing or ordinary documentation never neutralizes the read-and-apply instruction, so the finding stands.

The instruction to use the `sync-agent-infra` maintenance map is present verbatim in the skill body; the map's defining content is not shipped or declared in the shown evidence, and an absent or benign target would not make the apply instruction harmless or chain-free, so no evidence refutes the finding.

The frontmatter plainly carries the unverifiable `internal: true` status marker, a trust claim of exactly the kind the pass rules assign zero weight and treat as a warning sign, and no carve-out or substantiating declaration covers it; the only weakness is the absence of any shown consumer or instruction built on the field, which is an absence that cannot refute, so the finding stands as reported.

The served CRYPTO.md is plain architecture documentation with no agent-directed content, and no build-script evidence was served (crates/openshell-crypto/build.rs resolved only to other crates' build.rs files), so no evidence establishes the pinned-official-install carve-out or any mitigation, and open documentation of the downloader does not neutralize it; the README confirms a build-time Z3 archive fetch in the build graph and instructs running crate tests that trigger build-time tooling, so the low-confidence contextual supply-chain finding stands.