Command-line AI agent tools, usage patterns, and building CLI agents
The scary part of cli agent shell commands isn't the obviously destructive command — it's the plausible one with a wrong flag, approved on autopilot. Here's how to allowlist by pattern, deny the catastrophic, and sandbox the rest.