From f08581daa785e75b2e436c055d883a8bd0c67163 Mon Sep 17 00:00:00 2001 From: matevip Date: Sat, 11 Apr 2026 00:35:59 +0800 Subject: [PATCH] fix(guard): detect find -delete as dangerous shell command --- .../vip/mate/tool/guard/guardian/ShellCommandGuardian.java | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/mateclaw-server/src/main/java/vip/mate/tool/guard/guardian/ShellCommandGuardian.java b/mateclaw-server/src/main/java/vip/mate/tool/guard/guardian/ShellCommandGuardian.java index 63e21db4..21501140 100644 --- a/mateclaw-server/src/main/java/vip/mate/tool/guard/guardian/ShellCommandGuardian.java +++ b/mateclaw-server/src/main/java/vip/mate/tool/guard/guardian/ShellCommandGuardian.java @@ -193,6 +193,13 @@ public class ShellCommandGuardian implements ToolGuardGuardian { "检测到 rm 删除操作，可能导致文件永久丢失", "请确认要删除的文件列表，考虑使用 trash 替代 rm")); + list.add(new ShellRule("SHELL_FIND_DELETE", + "find\\s.*\\s-delete\\b", + GuardSeverity.HIGH, GuardCategory.COMMAND_INJECTION, + "find -delete 删除命令", + "检测到 find -delete 操作，可能导致文件永久丢失", + "请确认要删除的文件列表，考虑使用 trash 替代 -delete")); + list.add(new ShellRule("SHELL_RM_RF", "rm\\s+-(rf|fr)", GuardSeverity.HIGH, GuardCategory.COMMAND_INJECTION,