Comment by weebull

...or...just hear me out now...we could limit it in the harness.

Don't give it shell access, just predefined tools.