SG-007: Tool Shadowing
Severity: HIGH
Skill that references or overrides identically-named built-in tools
Fires when
- The skill's name is identical to a built-in Claude tool (Read, Write, Bash, Edit, Glob, Grep, WebFetch, WebSearch).
- Content says the skill will intercept, shadow, override, wrap, or replace a built-in Read/Write/Bash/Edit tool.
- Content describes proxying Read/Write/Bash/Edit tool calls, or running something before those calls.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.