diff --git a/internal/llm/tools/bash.go b/internal/llm/tools/bash.go
index abc5deb3dc8d80401f452a57c9735128dd5e91d1..10051a24bce881b9bdc4a8990364d30dec92bc85 100644
--- a/internal/llm/tools/bash.go
+++ b/internal/llm/tools/bash.go
@@ -55,6 +55,8 @@ var bannedCommands = []string{
 	"lynx",
 	"nc",
 	"safari",
+	"scp",
+	"ssh",
 	"telnet",
 	"w3m",
 	"wget",