Command Injection via LLM

Why it matters

Command injection via LLM is critical. Understanding shapes shell tool safety.

The architecture

LLM builds command from input.

Attacker injects ; || `.

Executes attacker command.

How it works end to end

Use argv arrays (no shell).

Parameterize.

Sandbox exec (gVisor).

Deny dangerous commands.