I wonder if there's a chance of getting rm -rf /* or zip bombs. Those are definitely in the training data at least.