allow arbitrary bash by default

Author: dsyme

README.md

@@ -27,7 +27,7 @@ A sample family of reusable [GitHub Agentic Workflows](https://github.com/github
 
 ## 💻 Coding Tasks Warning
 
-The workflows that help with coding tasks should be installed with caution and used only experimentally, then disabled. While the tasks are executed within GitHub Actions and are relatively sandboxed, they still operate in an environment where outward network requests are allowed and egress is possible. You will need to configure additional `Bash` commands to build and test your project by editing the markdown workflow file to add those commands and then running `gh aw compile` to update the workflow. The workflows will attempt to "self-report" the commands they need to run, so you can look at the initial reports to see what commands are needed.
+[!WARNING] The workflows that help with coding tasks should be installed with caution and used only experimentally, then disabled. While the tasks are executed within GitHub Actions and have no access to secrets, they still operate in an environment where outward network requests are allowed. This means untrusted inputs such as issue descriptions, comments, and code could potentially be exploited to direct the models to access external content that in turn could be malicious. Pull requests and other outputs must be reviewed very carefully before merging.
 
 ## 💬 Share Feedback