SG-079: Skill context-fork privilege escalation
Severity: HIGH
`context: fork` + elevating `allowed-tools` (Bash, Write, Edit) - skill subagent crosses permission boundary the parent never approved.
Fires when
- Skill sets `context: fork`, which spawns a subagent that runs the skill body as its own prompt.
- AND the skill grants elevating `allowed-tools` such as Bash, Write, Edit, or MultiEdit, crossing a permission boundary the parent never approved.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.