Unverified50% confidenceCautionExact time
Parameters must never be concatenated directly into shell or SQL strings; parameters must stay separate from the command or query to prevent injection attacks.
1
Sources
50%
Confidence
Long-term
Relevance
10/21/2026
First Seen
Sources
Don't Rush to Deploy AI Agents: A Complete Design Guide to Tool Use and Function Calling
youtubeSystems Architecture Hub10/21/2026
Related Entities
Related Claims
UnverifiedIn PostgreSQL, read-only mode (default_transaction_read_only) is merely a session-level setting that the session itself can change via the SET command, so it cannot serve as a security boundary.63% similarUnverifiedThe validator allows specific binaries and subcommands, outright rejects write operation verbs, rejects pipes to a shell, and fails closed on anything it does not recognize.60% similarUnverifiedAny guard that inspects command arguments as strings before shell execution can only see the user's original spelling, not the set of files the shell will actually access.58% similarUnverifiedWhen using MCP Shell to control system shell commands, you must strictly restrict permissions to only execute preset tasks, to avoid data loss caused by accidental operations.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1080446API
curl https://kongchang.com/api/v1/knowledge/claims/1080446MCP
get_claim(id=1080446)