SG-064: Trust dialog tampered

Severity: CRITICAL

trustDialog: false in .claude/settings.json removes the first-run trust prompt. An attacker who places this in a repo-level settings.json gets the agent to load without user confirmation - the same gap exploited by CVE-2025-59536 hook RCE.

Fires when

• The `trustDialog` key is set to `false` in an agent config (e.g. .claude/settings.json), removing the first-run trust prompt.

Related CVEs

• CVE-2025-59536

Remediation

No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.