execution-risk-check

Execution Risk Check

Before launching any debug session:

1. Inspect the command, args, env, and nearby code for obvious outbound behavior.
2. Treat these as approval-required:
   • literal http:// or https:// targets that are not localhost
   • explicit remote hosts or non-loopback sockets
   • known client libraries configured for external APIs
3. Allow local-only behavior without approval:
   • file access
   • process spawning
   • localhost or loopback traffic
4. If uncertain, say so explicitly and ask before running.