utils/security.py

class SecurityEngine:
    """Sanitizes directives and validates actions against prompt injections and path traversal."""

    @staticmethod
    def sanitize_input(user_input: str) -> str:
        dangerous_patterns = ["ignore previous instructions", "system override", "rm -rf", "drop table"]
        sanitized = user_input
        for p in dangerous_patterns:
            if p in sanitized.lower():
                sanitized = sanitized.replace(p, f"[BLOCKED_PATTERN: {p}]")
        return sanitized.strip()