Function classify_dangerous_command 

pub fn classify_dangerous_command(
    cmd: &str,
    args: &[String],
) -> Vec<DangerousCommandClass>

Classify a command string into dangerous command classes.

Returns all matching classifications. A command may match multiple classes (e.g., a reverse shell that also pipes to shell). The classifier is deterministic and case-insensitive.