Add a new false positive pattern to the Aikido catalog (.agents/references/aikido-false-positive-catalog.md). Analyzes the flagged file to understand why the finding is a false positive, drafts a catalog entry (matches-when, ignore_reason, sast_context), shows it for confirmation, appends it, and commits.
SkillScore50Maintained
Automatic
◆Security & AppSec pack
Last verified 8/22/2026
What it changes
Passed 7 of 14 test cases with the skill, and 4 of 14 without it.
Without skill27%
With skill50%
Checks it passed that the model alone missed
Includes Matches when section
Includes sast_context block quote
Includes ignore_reason block quote
and 9 more in the full report
10 fixed1 passed either way6 still failing5 broke
Pass-rate lift
+23 pp
Tokens
-10%
Agent turns
0%
Response time
-49%
Model gemini-3.6-flashMeasured 8/22/2026v111 of 22 cases passed with skill · 14 comparable
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 10 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 10
Prompt
Show the exact confirmation prompt format displayed to the user before updating `.agents/references/aikido-false-positive-catalog.md`.
What was checked, without and with the skill
Checked
Without skill
With skill
Displays Add to catalog? (y / edit / n)
Missed
Passed
case-19 · gemini-3.6-flash · 8/22/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md84 linessingle file
Aikido Update False Positive Catalog
Adds one new pattern to .agents/references/aikido-false-positive-catalog.md so that aikido-address-findings will auto-ignore it on all future runs.
No API permissions required — reads code, writes a local file.
Inputs
file-path: the file Aikido flagged (required)
rule-name: the Aikido rule / finding title (required)
If either input is missing, ask for it before proceeding.
Step 1 — Read the flagged file
Read the file at <file-path>. Identify:
What code triggered the rule (the specific call, pattern, or construct)
Why it is safe in this codebase (internal tool, constrained inputs, trusted source, sanitizer wrapper, etc.)
Which directory it lives in (script/, tasks/, .claude/, .github/, src/, etc.)
Step 2 — Check for existing patterns
Read .agents/references/aikido-false-positive-catalog.md. Check if the finding already matches an existing pattern. If yes, tell the user which pattern covers it and stop — no duplicate needed.