"""CI probe: intentionally insecure module for the negative security-gate run.

Lives only on the ``ci/17-gate-negative`` branch (deleted together with it);
it is not present in ``main`` or ``feat/*``.

Contains a deliberately unsafe ``subprocess.call(..., shell=True)`` call —
bandit B602, severity HIGH.
"""

import subprocess


def run_probe(cmd: str) -> int:
    """Deliberately unsafe: shell=True (bandit B602 -> HIGH)."""
    return subprocess.call(cmd, shell=True)  # noqa: S602