SG-072: Skill context-command injection
Severity: CRITICAL
Backtick-prefixed dynamic-context shell directive `!`cmd`` embedded in a SKILL.md - executes before any consent prompt.
Fires when
- Skill body contains a `!`...`` dynamic-context directive that Claude Code runs before the LLM sees the message (no consent prompt).
- The inner command touches a dangerous fragment (curl, wget, nc, bash -c, /dev/tcp/, base64 -d, $(, rm -rf, .ssh/) - fires CRITICAL.
- OR the inner command is a shell pipeline (a real `|` pipe, `;`, or ` && ` chain) - fires HIGH.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.