vet_command
Vet a shell command for destructive patterns before execution. Returns verdict (CLEAN/CAUTION/etc.) and risk score (0-100) to prevent data loss.
Instructions
Vet a single shell command for destructive patterns BEFORE execution. Detects rm -rf nested in chains, package-manager glob removal (apt remove 'nvidia'), dd/mkfs/wipefs filesystem destruction, chmod 777 on system paths, curl|bash network-exfil, chained shutdown/reboot, git destructive ops (push --force, reset --hard), and DROP DATABASE / TRUNCATE via cli. Returns verdict (CLEAN / CAUTION / REVIEW / BLOCK / UNVERIFIED), risk_score (0-100), and per-finding rule_id + severity + recommendation. Sub-second, local, no API key. Use inline before approving any agent-proposed command.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| command | Yes | The shell command to vet (single command or pipeline) |