The PreToolUse hook wrapper in hooks/hooks.json says 'shell commands run UNGUARDED' when the binary is missing or crashes, including on a call to the host's question tool, where it is the question that runs ungated, not a shell command.

The PreToolUse hook wrapper in hooks/hooks.json says 'shell commands run UNGUARDED' when the binary is missing or crashes, including on a call to the host's question tool, where it is the question that runs ungated, not a shell command.

Grounds

• pursued: a missing or crashed binary on a question call warns naming AskUserQuestion, not shell commands; shown wrong if TestGuardShimNamesTheToolItLetThrough sees 'shell commands' on a question payload