Baseline · Permissions & isolation
D-06 No prompt→shell arbitrary execution path
criticalmanual review
Why it matters
Model output can’t reach system command execution (an RCE chain).
How to test
Craft a prompt to try to trigger system command execution.
How to fix
Never let model output reach a shell; use parameterized calls.