AI-assisted scan summaries

The CLI does not detect whether code was AI-generated. Its only scan-time AI capability is an optional Mistral summary of findings already produced by custom rules, Semgrep, or npm audit.

Enable explicitly

MISTRAL_API_KEY=your-key krythiq scan --ai

Data and failure behavior

Up to 50 structured findings, including any captured snippet, are sent to Mistral. AI does not discover or change findings.

If the credential is missing, the request fails, or the 30-second timeout expires, the scan continues and JSON output contains "aiSummary": null.