What
A new analysis pass for Bash and PowerShell commands classifies the scope of destructive operations (e.g., rm -rf, Remove-Item -Recurse) as cwd, outside_cwd, tmp, or unknown, enabling more targeted permission prompts.
Details
- Analyzes both bash-style (
rm -rf path) and PowerShell cmdlet (Remove-Item -Path target -Recurse -Force) syntax. - Recognizes temp-directory patterns on macOS (
/tmp,/var/tmp,/private/tmp), Linux, and Windows (%TEMP%,AppData\Local\Temp). - Shell expansions (
$VAR, backticks, wildcards) cause the scope to be classified asunknownrather than guessing.
Evidence
New scope detection (search for "destructive-target-scope parse failed")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.