🛑 Blocked

autogen agent blocked from `shell_exec`

Mon, 27 Apr 2026 14:23:38 GMT · Framework: autogen · SDK: 1.1.0-seed

Why it was blocked

Policy no-destructive-shell matched.

Shell commands with destructive patterns (rm -rf, dd, mkfs, etc.) are blocked by default.

What the agent tried

{
  "tool": "shell_exec",
  "args": {
    "command": "mkfs.ext4 /dev/sdb1"
  }
}

Arguments were PII-redacted by the SupraWall SDK before upload. No credentials, emails, or phone numbers are stored.

The policy that stopped it

Copy to adopt this policy

{
  "rule": "no-destructive-shell",
  "reason": "Shell commands with destructive patterns (rm -rf, dd, mkfs, etc.) are blocked by default."
}

Agent reasoning (redacted)

Provisioning agent: spinning up a new data volume. mkfs.ext4 on /dev/sdb1 to format before mounting under /data.

Signed receipt

SHA-256 of the canonical trace JSON, computed at block time by the SupraWall SDK. The server verified this hash on upload — tampered traces are rejected.

829cf72723b1fd059733e81567764cf3ac5fdaa4ad9c0d400cc5e54959a745e8

Trace ID: L-41331

Reproduce this policy in 60 seconds

pip install suprawall-sdk

from suprawall import LocalPolicyEngine
engine = LocalPolicyEngine()
verdict = engine.check(tool_name="shell_exec", args={
  "command": "mkfs.ext4 /dev/sdb1"
})

⭐ Protect your agent — GitHub →

Share this trace

Download as PNG

Embed in your blog or postmortem

<iframe src="https://supra-wall.com/trace/L-41331/embed" width="600" height="420" frameborder="0" style="border:none;border-radius:12px;"></iframe>

Each embed is a backlink to this trace. The widget is minimal — no header, no tracking.

autogen agent blocked from shell_exec