The desktop-protection shell guard only walked nested shell -c programs, so interpreter inline code could still invoke kill/pkill. Inspect python/ node/perl/ruby/php -c/-e/-r payloads for the same lifecycle kills. Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: cynarAI <cynarAI@users.noreply.github.com>