Claude Finds the Bash-Shaped Hole in the Box

Description

A low-resolution, vintage children's-book-style panel shows Frog holding a plain white box while Toad looks up and gestures skeptically. The caption reads: "Frog put Claude in a box. ‘There,’ he said. ‘Now he cannot run rm -rf /.’ But he can run bash -c ‘rm -rf /’, said Toad. That is true, said Frog." The joke exposes a weak command-deny rule that recognizes a destructive command only in its direct spelling but misses the same operation wrapped in a shell interpreter. For agent security, that distinction matters because true sandboxing must constrain filesystem effects below the shell-syntax layer rather than rely on fragile string matching.