From 49a0447f9fe9230e4bd0d609041dad15f67b0d81 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=9C=B1=E6=BD=AE?= <zhuchaowe@users.noreply.github.com>
Date: Wed, 31 Dec 2025 16:59:33 +0800
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=A7=20chore(deep-agent):=20disable=20s?=
 =?UTF-8?q?hell=20feature=20by=20default?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Set enable_shell=False to disable shell command execution capabilities
in the deep agent for security reasons.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 agent/deep_assistant.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/agent/deep_assistant.py b/agent/deep_assistant.py
index f7c7498..0d9dec4 100644
--- a/agent/deep_assistant.py
+++ b/agent/deep_assistant.py
@@ -154,6 +154,7 @@ async def init_agent(config: AgentConfig):
             assistant_id=config.bot_id,
             tools=mcp_tools,
             auto_approve=True,
+            enable_shell=False,
         )
     else:
         # 构建中间件列表