Shell Access Toolset#

This toolset provides tools for executing shell commands within the current project directory.

shell_command#

Executes one of the allowed + approved shell commands within the current project’s root directory and returns the shell command’s output.

Parameters#

Tool Settings#

The allowed and approved command lists can be pre-configured in the config file under the tool_settings: section like this:

tool_settings:
  shell_command:
    allowed_commands: [ ... ]
    approved_commands: [ ... ]

Here are more details on the supported properties:

• allowed_commands:
  • An array of allowed executable named.
  • Defaults to ls cat grep whoami file wc find.
  • If not configured, falls back to ENKAIDU_ALLOWED_EXECUTABLES environment variable with space-separated values
• approved_commands:
  • An array of executables.which can be executed without confirmation
  • Defaults to none.
  • If not configured, falls back to ENKAIDU_APPROVED_EXECUTABLES environment variable with space-separated values

Notes#

• The tool checks for unsafe strings (.., |, <, >, ;, &) in the command.
• Commands must start with one of the allowed executables (e.g., ls, cat, grep).
• Commands that are not in the approved list require user confirmation.
• Bare commands (e.g., ls without arguments) are not allowed.