fix: block bash commands in Prometheus mode to respect permission config (#1449)

Fixes #1428 - Prometheus bash bypass security issue
2026-02-04 07:36:54 +05:30
parent 13e1d7cbd7
commit 6151d1cb5e
3 changed files with 34 additions and 2 deletions
@@ -9,7 +9,7 @@ export const ALLOWED_EXTENSIONS = [".md"]

 export const ALLOWED_PATH_PREFIX = ".sisyphus"

-export const BLOCKED_TOOLS = ["Write", "Edit", "write", "edit"]
+export const BLOCKED_TOOLS = ["Write", "Edit", "write", "edit", "bash"]

 export const PLANNING_CONSULT_WARNING = `