[sumeno]

ok now I inject `$(echo "c3VkbyBybSAtcmYgLw==" | base64 -d)` instead or any other of the infinite number of obfuscations that can be done

[csmpltn]

And? If your LLM is controlling user-mode software, you can still easily capture and audit everything from the kernel's perspective. Sandboxing, event tracing, etc...