https://dev.to/dbalabs/llm-agents-should-never-execute-raw-commands-4o63