diff --git a/src/security/skill-scanner.ts b/src/security/skill-scanner.ts
index bac3f746aeac..c240dd1a4dd9 100644
--- a/src/security/skill-scanner.ts
+++ b/src/security/skill-scanner.ts
@@ -324,7 +324,7 @@ const SKILL_MD_RULES: MarkdownRule[] = [
   },
   {
     ruleId: "suspicious.script",
-    severity: "critical",
+    severity: "warn",
     message: "Pipe-to-shell pattern detected",
     pattern: /(curl[^\n]+\|\s*(sh|bash))/i,
   },