{"version":"2.1.73","anchor":"improved-bash-command-safety-analysis","canonical_anchor":"improved-bash-command-safety-analysis","heading":"Improved Bash Command Safety Analysis","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.73\/e\/improved-bash-command-safety-analysis","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.73","markdown":"### Improved Bash Command Safety Analysis\n\nThe Bash command safety checker now correctly parses command wrappers that prepend the real command, preventing false safety denials when using common Unix utilities:\n\n- `timeout` \u2014 parses `--foreground`, `--kill-after`, `--preserve-status`, `--signal`, and duration arguments\n- `stdbuf` \u2014 parses `-i`, `-o`, `-e` buffer-mode flags\n- `env` \u2014 parses environment variable assignments and `-i`, `-0`, `-u`, `-v` flags\n- `time`, `nohup`, `nice` \u2014 unwrapped to find the actual command being run\n- These wrappers are recursively stripped before analyzing the inner command for safety\n\n**Evidence**\n\nCommand wrapper parsing (search for `\"--foreground\"`, `\"--kill-after\"`, `\"--preserve-status\"`, `\"stdbuf\"`)"}