LLMs are already fluent in Python. Instead of handing them a shell and hoping the permission regex holds, give them a Python interpreter with shell-escape paths structurally removed.
be NULL and we will crash with a NULL pointer dereference.