[mikewarot]

LLMs, in general, just output a stream of tokens that can be translated back to text. How can something that generates text, like cat be protected against? Just don't pipe it to a command prompt/shell, and you should be good.

In other words, don't execute its output.