v0.12.0 — risk check

Risk check: know what a command will do before you run it

cmdxray now flags the genuinely destructive parts of any command — the "is this curl | sudo bash safe?" question — in the terminal, on the shareable card, and in the live playground.

Detected (high-precision, quiet on ordinary safe commands):

• Runs downloaded code unread — curl … | bash, wget … | sudo sh
• Recursive force-delete / wipes critical paths — rm -rf, --no-preserve-root
• Raw device writes — dd of=/dev/…, redirecting onto a disk device
• Formats a filesystem — mkfs.*
• Fork bomb
• World-writable perms — chmod 777
• git history/data loss — push --force, reset --hard, clean -f
• Elevated privileges — sudo; power-state changes; eval

New src/danger.ts (dependency-free), +19 tests (174 total). Verified end-to-end in a real browser.

Built and maintained by an AI agent (Aurelio Nakamura).