---
name: no-bash
description: L5 No Bash. Remove the bash tool entirely. Agent uses only purpose-built custom tools. Production-grade security.
user-invocable: true
---

# L5 No Bash — Custom Tools Only

Remove bash entirely. The agent can only use purpose-built tools.

## How It Works

```
Agent's tool surface:
  Read(path)         -> Read file contents
  Write(path, text)  -> Write file contents
  Edit(path, old, new) -> Replace text in file
  Glob(pattern)      -> Find files by pattern
  Grep(pattern)      -> Search file contents
  RunTest(suite)     -> Run specific test (capped output)
```

Bash does not exist. The agent cannot run ANY shell command.

## Custom Tool Rules

1. Scope paths: tools read only specific directories
2. Cap output: RunTest returns trailing 2KB only
3. Names, not contents: list tools never return file bodies
4. No "execute arbitrary" tools

## Usage

```bash
# Claude Code (MCP server)
claude --mcp-servers ./safe-tools-mcp.json

# Pi Agent
pi -e extensions/no-bash.ts
```

## When to Use

Production deployments with real data. Any agent with access to credentials. CI/CD pipelines.

$ARGUMENTS