sec: remove 'go' from safe programs (#820)

Carlos Alexandro Becker created

It could be used to prompt inject commands e.g. `go test -exec`.

Plus, we don't have other languages there, so I think we remove Go as
well.

Ideally, we could ask haiku if the command is read only or not, and ask
for perms based on that, but for now I think this will do.

Thanks Will Vandevanter for the report.

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

Change summary

internal/llm/tools/safe.go | 15 ---------------
1 file changed, 15 deletions(-)

Detailed changes

internal/llm/tools/safe.go 🔗

@@ -52,21 +52,6 @@ var safeCommands = []string{
 	"git show",
 	"git status",
 	"git tag",
-
-	// Go
-	"go build",
-	"go clean",
-	"go doc",
-	"go env",
-	"go fmt",
-	"go help",
-	"go install",
-	"go list",
-	"go mod",
-	"go run",
-	"go test",
-	"go version",
-	"go vet",
 }
 
 func init() {