Safe Exec

Wrap shell commands with cryptographically random UUID boundaries to prevent prompt injection from untrusted output.

Why

LLM agents that execute shell commands are vulnerable to prompt injection via command output. An attacker controlling API responses, log files, or any external data can embed fake instructions that the model may follow.

This wrapper creates boundaries using random UUIDs that attackers cannot guess, making it impossible to forge closing markers.

Install

# Copy to PATH
cp scripts/safe-exec.sh ~/.local/bin/safe-exec
chmod +x ~/.local/bin/safe-exec

Usage