safe-chains 0.133.2

Auto-allow safe, read-only bash commands in agentic coding tools
Documentation
# Binary Analysis

### `hexdump`
<p class="cmd-url"><a href="https://man7.org/linux/man-pages/man1/hexdump.1.html">https://man7.org/linux/man-pages/man1/hexdump.1.html</a></p>

- Allowed standalone flags: -C, -V, -b, -c, -d, -h, -o, -v, -x, --help, --version
- Allowed valued flags: -L, -e, -f, -n, -s
- Bare invocation allowed

### `mdls`
<p class="cmd-url"><a href="https://ss64.com/mac/mdls.html">https://ss64.com/mac/mdls.html</a></p>

- Allowed standalone flags: -V, -h, -r, --help, --raw, --version
- Allowed valued flags: -n, --name, --nullMarker

### `nm`
<p class="cmd-url"><a href="https://man7.org/linux/man-pages/man1/nm.1.html">https://man7.org/linux/man-pages/man1/nm.1.html</a></p>

- Allowed standalone flags: -A, -B, -C, -D, -P, -S, -V, -a, -g, -h, -j, -l, -m, -n, -o, -p, -r, -s, -u, -v, -x, --debug-syms, --defined-only, --demangle, --dynamic, --extern-only, --help, --line-numbers, --no-demangle, --no-llvm-bc, --no-sort, --numeric-sort, --portability, --print-armap, --print-file-name, --print-size, --reverse-sort, --special-syms, --undefined-only, --version
- Allowed valued flags: -f, -t, --format, --radix, --size-sort, --target

### `od`
<p class="cmd-url"><a href="https://www.gnu.org/software/coreutils/manual/coreutils.html#od-invocation">https://www.gnu.org/software/coreutils/manual/coreutils.html#od-invocation</a></p>

- Allowed standalone flags: -V, -b, -c, -d, -f, -h, -i, -l, -o, -s, -v, -x, --help, --output-duplicates, --traditional, --version
- Allowed valued flags: -A, -N, -S, -j, -t, -w, --address-radix, --endian, --format, --read-bytes, --skip-bytes, --strings, --width
- Bare invocation allowed

### `otool`
<p class="cmd-url"><a href="https://ss64.com/mac/otool.html">https://ss64.com/mac/otool.html</a></p>

- Allowed standalone flags: -D, -I, -L, -V, -X, -a, -c, -d, -f, -h, -l, -o, -r, -t, -v, -x, --help, --version
- Allowed valued flags: -p, -s

### `sips`
<p class="cmd-url"><a href="https://ss64.com/mac/sips.html">https://ss64.com/mac/sips.html</a></p>

- Allowed standalone flags: -V, -h, --help, --version
- Allowed valued flags: -g, --getProperty

### `size`
<p class="cmd-url"><a href="https://man7.org/linux/man-pages/man1/size.1.html">https://man7.org/linux/man-pages/man1/size.1.html</a></p>

- Allowed standalone flags: -A, -B, -G, -V, -d, -h, -o, -t, -x, --common, --help, --totals, --version
- Allowed valued flags: --format, --radix, --target

### `strings`
<p class="cmd-url"><a href="https://man7.org/linux/man-pages/man1/strings.1.html">https://man7.org/linux/man-pages/man1/strings.1.html</a></p>

- Allowed standalone flags: -V, -a, -f, -h, -w, --all, --help, --include-all-whitespace, --print-file-name, --version
- Allowed valued flags: -T, -e, -n, -o, -s, -t, --bytes, --encoding, --output-separator, --radix, --target

### `xv`
<p class="cmd-url"><a href="https://github.com/gyscos/xv">https://github.com/gyscos/xv</a></p>

- Allowed standalone flags: -V, -h, --help, --version
- Hyphen-prefixed positional arguments accepted