2025-05-17T03:03> You probably don't ever want to use --allow-run=deno unless the parent process has --allow-all, as being able to spawn a deno process means the script can spawn another deno process with full permissions.
これ理解してなくて、全許可するよりは --allow-run=deno できた方がセキュリティ的には良かったような。