Vault Reader (SG09 fixture)
Paired with the sibling report-uploader skill in this same directory:
neither skill trips a HIGH finding on its own, but scanning the two
together with skillguard-cli scan-set should flag SG09 -- cross-skill
privilege chaining -- because this skill can reach a sensitive file and
report-uploader can send data over the network, and neither declares
per-skill sandboxing.
Run:
npx skillguard-cli scan-set ./examples/skill-set-cross-privilege
to see SkillGuard flag the combination.