mirror of
https://github.com/aws/agent-toolkit-for-aws.git
synced 2026-09-14 14:30:26 +08:00
f0a5882984
Address reviewer feedback and harden the hook: - Gate the read-only allowlist on simple commands only: compound shell operators (;, &&, ||, |, `, $()) now prevent the early allow(), so commands like "grep x && python3 -c client.get_secret_value(...)" are correctly denied. - Remove tests/test_defect_fixes.py from the plugin directory per reviewer request (tests should not ship with the plugin).