mirror of
https://github.com/shareAI-lab/analysis_claude_code.git
synced 2026-08-06 12:03:37 +08:00
s09_agent_teams.py, s10_team_protocols.py, and s11_autonomous_agents.py were missing the "> /dev/" entry in their dangerous command blocklist. This is present in s01, s06, s12, and s_full but was dropped when s09-s11 were written, creating a security regression where commands like `echo y > /dev/sda` could bypass the blocklist.