fix(lint): lint-skill.sh recognizes read as a variable binding, not just VAR=

[carlos-alm]

Summary

• lint-skill.sh's Check 1 (cross-fence variable usage) only recognized VAR=value as a variable assignment. read/read -r VAR1 VAR2 ... binds variables just as validly, but with no = after the name.
• This caused a false positive on fixer/SKILL.md itself: its I4 integrity check re-derives a per-line $COUNT (expected occurrence count) via while IFS=$'\t' read -r F COUNT LINE; do ..., which collides in name only with the unrelated batch-size $COUNT set up in Phase 0. Since each ```bash fence is a separate bash invocation, there's no real collision at runtime — but the linter didn't recognize the later block's own fresh read-bound $COUNT, so it flagged the block's own local variable as if it were a stale cross-fence reference.
• Fix: the assignment-collection pass now also recognizes read/read -r targets as variable bindings (same VAR_BLOCK/REASSIGNED bookkeeping used for VAR=), scoped to the same block via a register_var helper shared by both detection paths.

Verified this doesn't mask genuine cross-fence bugs: a var assigned in one block and referenced in a later block without any read/= rebinding in that later block is still correctly flagged. Ran the patched linter against every SKILL.md in the repo and diffed error/warning counts against the pre-fix version — only fixer/SKILL.md changed (2 errors → 0), every other skill's output is byte-identical.

Test plan

• New regression test tests/unit/lint-skill-read-binding-2344.test.ts: does-not-flag (read-rebinding case), still-flags (genuine leak), still-flags (leak past an unrelated read in the same block), and a direct assertion that fixer/SKILL.md itself produces no $COUNT error
• Full test suite: 327 files / 5245 tests passed
• npm run lint clean
• diff-impact --staged — no function-level impact (shell script + new test file)
• Manually diffed lint-skill.sh output across all .claude/skills/*/SKILL.md before/after — no regressions

Closes #2344

[greptile-apps]

Greptile Summary

The PR updates the skill linter to recognize variables bound by Bash read commands while preserving detection of genuine cross-fence references.

• Centralizes assignment bookkeeping through register_var.
• Adds sanitization for prompt, redirection, and value-taking option operands before collecting read destinations.
• Adds regression coverage for ordinary, array, readline, and combined-option forms.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
.claude/skills/create-skill/scripts/lint-skill.sh	Adds block-local read binding recognition and incorporates the prior review fixes for non-destination operands and combined options.
tests/unit/lint-skill-read-binding-2344.test.ts	Covers the intended rebinding behavior, genuine leaks, prompt and option operands, array destinations, and combined short options.

_{Reviews (5): Last reviewed commit: "fix(lint): replace per-line subprocess p..." | Re-trigger Greptile}