nah does classify python -c as lang_exec = ask, and the optional LLM layer sees the actual code, but it's not bulletproof. Keeping a clean working tree is probably the single best defense regardless of tooling.