{"record":{"id":"f815a00f7a97cba6","repo":"ruvnet/ruflo","slug":"dangerous-pattern","errorCode":"DANGEROUS_PATTERN","errorMessage":"Dangerous pattern detected in argument: ${arg}","messagePattern":"Dangerous pattern detected in argument: (.+?)","errorType":"exception","errorClass":"SafeExecutorError","httpStatus":null,"severity":"error","filePath":"v3/@claude-flow/security/src/safe-executor.ts","lineNumber":271,"sourceCode":"   * @param args - Arguments to validate\n   * @throws SafeExecutorError if arguments contain dangerous patterns\n   */\n  private validateArguments(args: string[]): void {\n    for (const arg of args) {\n      // Check for null bytes\n      if (arg.includes('\\0')) {\n        throw new SafeExecutorError(\n          'Null byte detected in argument',\n          'NULL_BYTE_INJECTION',\n          undefined,\n          args\n        );\n      }\n\n      // Check against blocked patterns\n      for (const pattern of this.blockedPatterns) {\n        if (pattern.test(arg)) {\n          throw new SafeExecutorError(\n            `Dangerous pattern detected in argument: ${arg}`,\n            'DANGEROUS_PATTERN',\n            undefined,\n            args\n          );\n        }\n      }\n\n      // Check for command chaining attempts\n      if (/^-.*[;&|]/.test(arg)) {\n        throw new SafeExecutorError(\n          `Potential command chaining in argument: ${arg}`,\n          'COMMAND_CHAINING',\n          undefined,\n          args\n        );\n      }\n    }","sourceCodeStart":253,"sourceCodeEnd":289,"githubUrl":"https://github.com/ruvnet/ruflo/blob/fa13ee4ad60ac2090b1480656eb233521790d640/v3/@claude-flow/security/src/safe-executor.ts#L253-L289","documentation":"SafeExecutor.validateArguments matched an argument against one of the configured blockedPatterns (compiled regex allowlist of known-dangerous substrings). The argument resembles shell metacharacters or injection payloads that could abuse the target command even without a shell, so execution is refused.","triggerScenarios":"Thrown at v3/@claude-flow/security/src/safe-executor.ts:271 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Escape or remove shell metacharacters from the argument.","Treat the argument as data, not code: pass it via an argv array so no shell interpretation occurs."],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"fa13ee4ad60ac2090b1480656eb233521790d640","analyzedAt":"2026-08-18T21:34:22.708Z","contentChangedAt":"2026-08-18T21:34:22.708Z","schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}