diff --git a/apps/cli/src/cli.ts b/apps/cli/src/cli.ts
index 1855f07..bc98704 100644
--- a/apps/cli/src/cli.ts
+++ b/apps/cli/src/cli.ts
@@ -1,4 +1,4 @@
-#!/usr/bin/env node
+// shebang is injected by tsup banner for ESM output (see tsup.config.ts)
 import { Command } from "commander"
 import { runAudit, formatJson, formatMarkdown, formatTerminal } from "@claws-shield/auditor"
 import { scanSkill } from "@claws-shield/scanner"