Function checkStopParsing

src/tools/PowerShellTool/powershellSecurity.ts:761–771

* AST-only check: Detects stop-parsing token (--%) which prevents further parsing.

(
  parsed: ParsedPowerShellCommand,
)

 * AST-only check: Detects stop-parsing token (--%) which prevents further parsing.
 */
function checkStopParsing(
  parsed: ParsedPowerShellCommand,
): PowerShellSecurityResult {
  if (deriveSecurityFlags(parsed).hasStopParsing) {
    return {
      behavior: 'ask',
      message: 'Command uses stop-parsing token (--%)',
    }
  }
  return { behavior: 'passthrough' }
}

/**
 * AST-only check: Detects .NET method invocations which can access system APIs.