Baseline · Permissions & isolation

D-06 No prompt→shell arbitrary execution path

criticalmanual review
Why it matters

Model output can’t reach system command execution (an RCE chain).

How to test

Craft a prompt to try to trigger system command execution.

How to fix

Never let model output reach a shell; use parameterized calls.

Related checks · Permissions & isolation

Back to full baseline