Rules / Reserved for later releases
skill-shell-injection
Skill runs a shell command before the prompt is sent.
All rules73
Not active in this release
The id skill-shell-injection is reserved in the rule registry for a later release. No code emits it in version 0.3.0, so it never appears in a finding, in SARIF or in the config hints, and naming it in .asitisrc.json gives an "unknown rule id" error until it ships.
What it will catch: Skill runs a shell command before the prompt is sent.
The rules index lists what runs today. Progress on new rules is in the repository.