scanner: downgrade pipe-to-shell markdown pattern to warn

2026-05-21 12:04:59 +00:00 · 2026-02-27 11:05:53 -08:00
parent b7bf6c6120
commit d40a017a44
1 changed files with 1 additions and 1 deletions
--- a/src/security/skill-scanner.ts
+++ b/src/security/skill-scanner.ts
@@ -324,7 +324,7 @@ const SKILL_MD_RULES: MarkdownRule[] = [
  },
  {
    ruleId: "suspicious.script",
-    severity: "critical",
+    severity: "warn",
    message: "Pipe-to-shell pattern detected",
    pattern: /(curl[^\n]+\|\s*(sh|bash))/i,
  },