2 Commits

Author	SHA1	Message	Date
Yif-Yang	d2b569be30	fix(spreadsheet): close ReAct Python allow-list gaps	2026-07-26 15:19:06 +00:00
Murali Chillakuru	085e005d92	security: remove shell=True from ReAct agent bash tool ... Parse the command with shlex.split and run with shell=False, and restrict the executable to a python/python3 allow-list. This removes shell metacharacter injection (the benchmark only needs Python to manipulate spreadsheets). Adds tests for the allow-list gate and non-interpretation of shell metacharacters.	2026-07-25 18:41:23 -04:00