Simple implementation for limiting shell commands. - #23956

Closed

Penguin-Guru wants to merge 15 commits into

ggml-org:masterfrom

Penguin-Guru:limiting-shell-commands

Commits on Jul 25, 2026

Simple implementation for limiting shell commands.

Penguin-Guru
authored and
Penguin-Guru
committed
8d6997c
Added basic screening for shell command delimiters.

Penguin-Guru
authored and
Penguin-Guru
committed
5afca59
Switched error label and consolidated logic.

Penguin-Guru
authored and
Penguin-Guru
committed
3f196d7
Made description indicate whitelist and blacklist dynamically.

Penguin-Guru
authored and
Penguin-Guru
committed
f6b8fbf
Return error on tool call failure in streaming mode.

Penguin-Guru
authored and
Penguin-Guru
committed
4d0b209
Added Python tests.

Penguin-Guru
authored and
Penguin-Guru
committed
9ba1690
Added simple tool for viewing the program whitelist.

Penguin-Guru
authored and
Penguin-Guru
committed
e2ecbe6
Updated README.

Penguin-Guru
authored and
Penguin-Guru
committed
50d3172
Moved static variable out of header.

Penguin-Guru
authored and
Penguin-Guru
committed
f21a902
Updated blacklist of Windows shell symbols.

Penguin-Guru
authored and
Penguin-Guru
committed
6addf79

Commits on Jul 26, 2026

Removed some blacklisted symbols that should be safe.

Penguin-Guru
authored and
Penguin-Guru
committed
68c5ada

Commits on Jul 27, 2026

Added support for piping/chaining shell commands.

Penguin-Guru
authored and
Penguin-Guru
committed
7392a21
Updated description in `--help` output.

Penguin-Guru
authored and
Penguin-Guru
committed
71b8e94
Merge remote-tracking branch 'upstream/master' into limiting-shell-commands

Penguin-Guru
authored and
Penguin-Guru
committed
71bfbb8

Commits on Jul 28, 2026

Fixed missing newline in `shell_cmd_delims`.

Penguin-Guru
authored and
Penguin-Guru
committed
1b102e1