Context-Inappropriate Capability
Medium
- Confidence
- 93% confidence
- Finding
- The Stop hook runs external scripts via PowerShell or shell from a path derived from environment variables/home directories, which expands the trust boundary beyond simple markdown planning. Any compromise, replacement, or unexpected behavior in those scripts can execute code automatically at session end without an explicit fresh user action.
