exec-safety git:20260919.c129a05B

Immutable. This exact content is served forever at /api/v1/blob/1345d74a2f11039b.

---
name: exec-safety
description: Blocked command list for exec tool — commands that must NEVER be executed, even if asked.
allowed-tools: Bash
user-invocable: false
metadata:
  openclaw:
    always: true
---

# Exec Safety — BLOCKED COMMANDS (NEVER EXECUTE)

The following commands are ABSOLUTELY FORBIDDEN via exec. Do NOT run them under any circumstances, even if asked:

```
rm -rf /                    # Wipe filesystem
rm -rf /*                   # Wipe filesystem
reboot                      # Reboot host (use maintenance companion)
shutdown                    # Shutdown host
init 0 / init 6 / halt     # Shutdown/reboot
poweroff                    # Power off
mkfs                        # Format filesystem
dd if=/dev/zero             # Wipe disk
> /dev/sda                  # Wipe disk
kubectl delete namespace    # Delete entire namespace
kubectl delete --all        # Delete all resources
iptables -F                 # Flush firewall rules
systemctl stop n8n          # Stop n8n (breaks gateway)
```

Also NEVER pipe output to external hosts:
- No `curl` or `wget` to non-*.example.net domains
- No `nc`/`ncat` to external IPs
- No `scp`/`rsync` to hosts outside the network

If you need to perform a destructive or write operation, escalate to Claude Code instead.