Never Interpolate Tool Args Into a Shell. Exec argv or Fail the Job.
This story is from 2026-09-23. It is preserved in the archive; the latest stories are on the live feed.
The model can name a tool. It cannot name a shell. That is the rule I actually enforce now. If you take a tool call, glue it into a string, and hand that string to bash -lc , you already lost. Quotes lie. Newlines lie. $HOME expands. And the "tiny helper" the model invented is a pipeline you never…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-09-23 16:57 · DEV Community — AI
Never Interpolate Tool Args Into a Shell. Exec argv or Fail the Job.