Method validateShellConfig

cli/agent/command_executor.go:276–295

validateShellConfig checks that a shell config file is safe to source. It rejects symlinks (which could point to malicious files) and world-writable files (which could be tampered with).

(path string)

// It rejects symlinks (which could point to malicious files) and
// world-writable files (which could be tampered with).
func (e *CommandExecutor) validateShellConfig(path string) error {
	if path == "" {
		return nil
	}

	info, err := os.Lstat(path)
	if err != nil {
		return err
	}

	if info.Mode()&os.ModeSymlink != 0 {
		return fmt.Errorf("shell config %q is a symlink — refusing to source", path)
	}

	if runtime.GOOS != "windows" && info.Mode().Perm()&0002 != 0 {
		return fmt.Errorf("shell config %q is world-writable — refusing to source", path)
	}

	return nil
}

// CaptureOutput executa comando e captura apenas a saída (para uso interno)
func (e *CommandExecutor) CaptureOutput(ctx context.Context, shell string, args []string) ([]byte, error) {