Building a dataflow analyzer to detect read-only vs state-changing shell commands for agent sandboxes
spammmmmmmmy · reddit · 2026-09-28
A developer building a tool-calling sandbox proposes a dataflow analyzer for shell commands that identifies source/sink points to classify commands as read-only or state-changing. Pipelines like sed -n '124p' file | od -c | head -5 resolve to read-only sinks and can be auto-allowed, while sed ... > /tmp/foo or piping into visudo counts as writes. They're asking whether an existing library already targets this goal.
More from coding & agent
- Electron co-maintainer rebuilds his homepage with Opus 5.5, AI-made music and 3D assets — felixrieseberg · 2026-09-28
- Anthropic engineer rebuilds homepage with Opus 5.5: music, movies, Blender — no terminal, no Git — felixrieseberg · 2026-09-28
- Browser-based GPU RL policy learning demo showcased as a model test, built with Opus 5.5 — ricklamers · 2026-09-28
- Redditor builds a 5-part Anima guide after finding all existing tutorials "genuinely sucked" — shapic · 2026-09-28
- 7-year-old ships ad-free game in 12 hours with Claude and Codex agents — natesiggard · 2026-09-28
- Admin auth for 15 FastAPI routes silently depended on Render's RENDER env var — Initial_Orange2985 · 2026-09-28