Security

# 已阻止：命令链
cat file; rm -rf /

# 已阻止：子 shell
echo $(cat /etc/passwd)

# 已阻止：路径穿越
cat ../../../etc/passwd

  "credentials": {
    "google_oauth_token": {
      "secret_name": "google_oauth_token",
      "location": { "type": "bearer" },
      "host_patterns": ["gmail.googleapis.com"]
    }
  }

{
  "network": {
    "allowed_hosts": ["api.example.com"]
  },
  "workspace": {
    "allowed_prefixes": ["telegram/"]
  }
}