Yes, the rules dont catch everything but since this is an open-source project, anyone can add new rules, and I'll be looking for new approaches. as for the llm, it reads the same text as the agent, so it can be fooled as well)