docs(security): add AgentShield evidence for MCP review skill

docs/security/evidence/mcp-dependency-review-agentshield.md

@@ -0,0 +1,26 @@
+# MCP Dependency Review — AgentShield Evidence
+
+Generated for PR validation on 2026-09-25 using ECC's published AgentShield CLI.
+
+Scope: `.agents/skills/mcp-dependency-review`
+
+Command shape:
+
+```bash
+npx --yes ecc-agentshield scan \
+  --path .agents/skills/mcp-dependency-review \
+  --format json \
+  --evidence-pack <temporary-directory>
+```
+
+No active prompt-injection testing, sandbox execution, deep analysis, or auto-fix mode was enabled.
+
+Result:
+
+- AgentShield exit code: `0`
+- files scanned: `1`
+- security score: `100`
+- grade: `A`
+- SARIF findings: `0`
+
+The committed SARIF is the redacted `agentshield-results.sarif` artifact produced by the evidence pack. AgentShield replaced the local scan root with `<target-path>`; no local username, absolute home path, credential, or token is included.

docs/security/evidence/mcp-dependency-review-agentshield.sarif

@@ -0,0 +1,33 @@
+{
+  "version": "2.1.0",
+  "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
+  "runs": [
+    {
+      "tool": {
+        "driver": {
+          "name": "AgentShield",
+          "informationUri": "https://github.com/affaan-m/agentshield",
+          "rules": []
+        }
+      },
+      "automationDetails": {
+        "id": "agentshield/security-scan"
+      },
+      "invocations": [
+        {
+          "executionSuccessful": true,
+          "endTimeUtc": "2026-09-25T10:10:50.216Z",
+          "workingDirectory": {
+            "uri": "<target-path>"
+          }
+        }
+      ],
+      "properties": {
+        "score": 100,
+        "grade": "A",
+        "filesScanned": 1
+      },
+      "results": []
+    }
+  ]
+}