project-discipline-guides

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The repository includes a script that deliberately loads local .env data (when available), spawns external LLM CLI processes with flags that bypass permission/trust checks, and feeds local prompt/content into those CLIs—behavior that can leak sensitive environment variables and local content to external services and enables remote code execution via spawned binaries.