- block-curl-pipe-shbyopen-coder-ai
Best-effort guard against piping a network download straight into a shell or script interpreter: curl|wget|iwr ... |…
- block-destructive-commandsbyopen-coder-ai
Best-effort guard against destructive commands: rm -rf targeting absolute, home ($HOME/~) or root-adjacent paths (and…