Module dangerous_commands 

Detection of dangerous commands that should never be executed.

This module implements hardcoded detection for commands that are inherently destructive or dangerous, regardless of their options.

Examples:

• rm -rf / (destructive)
• git reset --hard (destructive)
• dd if=/dev/zero of=/dev/sda (very destructive)
• sudo rm (privilege escalation + destruction)

Functions

command_might_be_dangerous

Checks if a command appears dangerous to execute. Returns true if the command should be blocked before execution.

command_requires_approval

Returns whether the command crosses an inline-code boundary that must be admitted by an enforceable sandbox or explicit human approval.

dangerous_command_reason

Reason a command tripped command_might_be_dangerous, used for actionable preflight messages. Mirrors the git arm of [is_dangerous_to_call_with_exec] including env/sudo prefix unwrapping; non-git patterns keep the generic rejection text.

git_global_option_requires_prompt

Returns whether a git global option can redirect repository, config, or helper lookup and therefore must not be treated as an inspection flag.