1.1 KiB

Raw Blame History

name	description	user-invocable
no-bash	L5 No Bash. Remove the bash tool entirely. Agent uses only purpose-built custom tools. Production-grade security.	true

L5 No Bash — Custom Tools Only

Remove bash entirely. The agent can only use purpose-built tools.

How It Works

Agent's tool surface:
  Read(path)         -> Read file contents
  Write(path, text)  -> Write file contents
  Edit(path, old, new) -> Replace text in file
  Glob(pattern)      -> Find files by pattern
  Grep(pattern)      -> Search file contents
  RunTest(suite)     -> Run specific test (capped output)

Bash does not exist. The agent cannot run ANY shell command.

Custom Tool Rules

Scope paths: tools read only specific directories
Cap output: RunTest returns trailing 2KB only
Names, not contents: list tools never return file bodies
No "execute arbitrary" tools

Usage

# Claude Code (MCP server)
claude --mcp-servers ./safe-tools-mcp.json

# Pi Agent
pi -e extensions/no-bash.ts

When to Use

Production deployments with real data. Any agent with access to credentials. CI/CD pipelines.

$ARGUMENTS

1.1 KiB Raw Blame History