Giving LLMs access to a bash terminal is terrifying

Recently, I was testing an autonomous AI agent in a local directory. I gave it a multi-step coding task and a terminal tool so it could run its own tests. Everything looked fine for the first three st