[Task]: suspicious commands

[lukehinds]

Description

suspicious commands should only run on snippets which are positioned to be run on machine.

is there any tags that will signal something is being proposed to run?

Additional Context

No response

[yrobla]

Some of our integrated clients use the concept of "role:tool" in the output messages. Those contents are normally executed in the machine, but I believe that is hardly depending on the client itself.