[aw] SVG Visual Audit hit shell expansion guard rejection

### Workflow Failure

**Workflow:** [SVG Visual Audit](https://github.com/githubnext/gh-aw-cao/blob/12093/merge/.github/workflows/svg-visual-audit.md)
**Branch:** add-dashboard-lp-desc
**Run:** https://github.com/githubnext/gh-aw-cao/actions/runs/35090487011

> [!WARNING]
> **Shell Expansion Guard Rejected Command**: The sandbox rejected a shell command because expansion patterns looked unsafe.

This signal was detected from engine runtime logs and is usually caused by retrying a multi-line shell command that embeds safe-output JSON or Markdown directly in the command text.

How to remediate

- Do **not** retry the identical rejected command.
- Put multi-line content in a temporary file with a single-quoted heredoc.
- Use `jq -Rs` to JSON-escape the file contents before piping to `safeoutputs`.

```bash
cat <<'EOF' > /tmp/gh-aw/body.md
Title

Multi-line body content goes here.
EOF
jq -Rs '{title: "My title", body: .}' /tmp/gh-aw/body.md | safeoutputs create_discussion .
```

### Action Required

**Assign this issue to an agent** to debug and fix the issue.

Debug with any coding agent

Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.):

````
Debug the agentic workflow failure using https://raw.githubusercontent.com/github/gh-aw/main/debug.md

The failed workflow run is at https://github.com/githubnext/gh-aw-cao/actions/runs/35090487011
````

Manually invoke the agent

Debug this workflow failure using your favorite Agent CLI and the `agentic-workflows` prompt.

- Start your agent
- Load the `agentic-workflows` skill from `.github/skills/agentic-workflows/SKILL.md` or
- Type `debug the agentic workflow svg-visual-audit failure in https://github.com/githubnext/gh-aw-cao/actions/runs/35090487011`

> [!TIP]
>
> Stop reporting this workflow as a failure
>
> To stop a workflow from creating failure issues, set `report-failure-as-issue: false` in its frontmatter:
> ```yaml
> safe-outputs:
> report-failure-as-issue: false
> ```
>
>

> Generated from [SVG Visual Audit](https://github.com/githubnext/gh-aw-cao/actions/runs/35090487011) · copilot · 151.5 AIC · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-id%3A+svg-visual-audit%22&type=issues)
> - [x] expires on Sep 17, 2026, 12:04 PM UTC

Start with .github/workflows/svg-visual-audit.md and inspect the failed run logs for run 35090487011. Read debug.md and the agentic-workflows skill referenced in the issue, then trace the rejected command and its safe-outputs usage. Done means the SVG Visual Audit workflow completes without a shell expansion guard rejection.

Written by the indexing model from the issue text.