The issue here is that LLMs sometimes "make a mistake" and issue a command like that in the first place, as seen in the wild