diff --git a/src/create-prompt/index.ts b/src/create-prompt/index.ts index 0136375..751e970 100644 --- a/src/create-prompt/index.ts +++ b/src/create-prompt/index.ts @@ -101,11 +101,7 @@ export function buildRemoteAgentAllowedToolsString( ); // Add safe git tools only (read-only operations) - baseTools.push( - "Bash(git status:*)", - "Bash(git diff:*)", - "Bash(git log:*)", - ); + baseTools.push("Bash(git status:*)", "Bash(git diff:*)", "Bash(git log:*)"); // Add GitHub Actions MCP tools if enabled if (includeActionsTools) { diff --git a/test/create-prompt.test.ts b/test/create-prompt.test.ts index e2e6c07..f498841 100644 --- a/test/create-prompt.test.ts +++ b/test/create-prompt.test.ts @@ -1248,7 +1248,10 @@ describe("buildRemoteAgentAllowedToolsString", () => { test("should never include dangerous git tools regardless of parameters", () => { const dangerousCustomTools = ["Bash(git commit:*)", "Bash(git config:*)"]; - const result = buildRemoteAgentAllowedToolsString(dangerousCustomTools, true); + const result = buildRemoteAgentAllowedToolsString( + dangerousCustomTools, + true, + ); // The function should still include dangerous tools if explicitly provided in custom tools // This is by design - if someone explicitly adds them, they should be included