Expand description
Detection of dangerous commands that should never be executed.
This module implements hardcoded detection for commands that are inherently destructive or dangerous, regardless of their options.
Examples:
rm -rf /(destructive)git reset --hard(destructive)dd if=/dev/zero of=/dev/sda(very destructive)sudo rm(privilege escalation + destruction)
Functionsยง
- command_
might_ be_ dangerous - Checks if a command appears dangerous to execute. Returns true if the command should be blocked before execution.