Reported by Xinzhiyuan After AI agents began taking over terminals, security issues also entered the execution environment. When an agent can read files, write scripts, run commands, and continuously adjust its next action based on system feedback, a single incorrect decision may affect actual file and system state. Enabling agents to promptly identify potential risks while completing tasks has become an important issue in agent safety research. Long-horiz