{"version":"2.1.248","anchor":"command-analysis-sees-through-wrappers-and-ignores-benign-en","canonical_anchor":"command-analysis-sees-through-wrappers-and-ignores-benign-en","heading":"Command analysis sees through wrappers and ignores benign env prefixes","tier":"internal","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248\/e\/command-analysis-sees-through-wrappers-and-ignores-benign-en","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248","markdown":"### Command analysis sees through wrappers and ignores benign env prefixes\n\nCommand parsing now looks past wrappers like sudo and timeout and ignores harmless variable prefixes.\n\n**What**\n\nBash command parsing gained two lists: shells and wrappers to look past when finding the real command (sudo, doas, xargs, timeout, nsenter and more), and environment variables treated as harmless when prefixed onto a command (`GOEXPERIMENT`, `RUST_LOG`, `NO_COLOR`, `CI`, `ANTHROPIC_API_KEY` among them), with a matching `VAR=` assignment pattern.\n\n**Evidence**\n\n`PYTEST_DISABLE_PLUGIN_AUTOLOAD`\n\n- Area: Permissions\n- Tier: Under the hood\n- Useful: 3\/5\n- Signal: 3\/5"}