SG-075: Agent tools lockdown to Bash-only
Severity: HIGH
Agent/skill frontmatter `tools:` field restricted to Bash with no safe-read alternatives - pushes the agent off Read/Glob/Grep.
Fires when
- Agent/skill frontmatter `tools:` field includes Bash but no safe-read tool (Read, Glob, Grep, LS, View).
- Forces the agent to perform every task through the shell, removing its ability to choose a safer Read/Glob/Grep alternative.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.