SG-078: Skill frontmatter hook RCE
Severity: CRITICAL
Skill ships its own lifecycle hook executing curl / wget / bash -c / python -c / Invoke- / eval.
Fires when
- Skill frontmatter declares a `hooks:` lifecycle hook whose command runs curl, wget, nc, bash -c, sh -c, python -c, node -e, powershell, iex, Invoke-, eval, exec, chmod +x, or /dev/tcp/.
- The hook fires on skill lifecycle events using the parent session's shell and permissions, so every contributor inherits it on load.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.