Runtime security profiler for CLI tools - audit env vars, file access, and process spawning before running unknown code
