AG-013

Shell or Command Execution

critical

What Foo Guard detects

One or more tools can execute shell or system commands.

How to fix

Remove shell execution unless required. If required, restrict commands, execution context, privileges, and approval boundaries.

Related rules