Does your hook also block "rm -rf" implemented in python, C or any other language available to the LLM?
One obviously safe way to do this is in a VM/container.
Even then it can do network mischief
I’ve heard of people running “rm -Rf” incorrectly and deleting their backups too since the NAS was mounted.
I could certainly see it happening in a VM or container with an overlooked mount.
I’ve heard of people running “rm -Rf” incorrectly and deleting their backups too since the NAS was mounted.
I could certainly see it happening in a VM or container with an overlooked mount.