Security Deep Dive
As we build more powerful tools, security becomes critical.
- Path Sanitization: Use
path.resolveand check if the path starts with your root directory. - Command Injection: Never use
eval()or pass unsanitized strings toexec().
Assignment: Add a check to your File Writer tool to ensure it only writes to the ./allowed/ directory.