v0.12.0

What's New

New Features

• --no-custom-rules flag — mitigate T1 supply chain risk by disabling custom rule loading (#254)
• Hooks & settings security lint rules — new rules to detect dangerous patterns in hooks and settings configuration (#253)

Fixes

• Fix frontmatter regex accepting bogus closing delimiter (#251)
• Fix AttributeError crash with unquoted integer version field (#250)

Other

• Reorganize builtin rules to one-rule-per-file for maintainability (#238)
• Make APM skills user-invocable (#252)