Shell tools
A persistent bash shell on the host. Off unless the operator turns it on.
- On or off by default
- off
- Who can switch it
- owner
- Why it is a group
- The shell is high risk, so only the operator can turn it on.
- Number of tools
- 5
Typical uses
- Run git or build commands in a workspace folder
- Watch a long command
- Answer a prompt from an interactive program
Risks
Runs as the same operating-system user as the bot. Guard rules are not a security boundary.
In this section
shell_execRuns a bash command in a persistent session. Off unless the operator enables the shell.shell_viewShows new output of a shell session.shell_sendSends text to an interactive program.shell_killInterrupts, terminates, kills or closes a session.shell_infoShows workspace folder, free disk, sessions and tools.
See also:shell_execshell_viewTools
Checked against the source at commit f4fd89f on 29 Oct 2026. Everything here is merged on the main branch; no release has been tagged yet. The source is private, so these pages are the public description.