build: For extra protection added a deny to all sudo in bash

2026-05-03 15:51:57 -04:00
parent 4ef80bffb4
commit 328dd5ab0f
28 changed files with 56 additions and 0 deletions
@@ -120,6 +120,8 @@ permission:
    "curl*localhost:4096*": deny
    "curl*127.0.0.1:4096*": deny

+    "sudo *": deny
+
  # All the subagents you want this agent to have access to
  task:
    # All agents should start with deny and only enable what you need