Files
Reyhan Koyun f0a5882984 fix(aws-core): prevent compound-command bypass in secret-safety hook, remove tests
Address reviewer feedback and harden the hook:

- Gate the read-only allowlist on simple commands only: compound shell
  operators (;, &&, ||, |, `, $()) now prevent the early allow(), so
  commands like "grep x && python3 -c client.get_secret_value(...)" are
  correctly denied.
- Remove tests/test_defect_fixes.py from the plugin directory per reviewer
  request (tests should not ship with the plugin).
2026-07-16 10:43:42 -07:00
..