Function ExtractBaseCommand

tools/bash/tokenizer.go:264–281

(command string)

}

func ExtractBaseCommand(command string) string {
	cleaned := StripAllSafeEnvPrefixes(strings.TrimSpace(command))
	if cleaned == "" {
		return ""
	}
	tokens := Tokenize(cleaned, false)
	if len(tokens) == 0 {
		return ""
	}
	base := tokens[0]
	if base == "sudo" || base == "doas" || base == "pkexec" {
		if len(tokens) == 1 {
			return ""
		}
		base = tokens[1]
	}
	return NormalizeBaseToken(base)
}