Comment by anuramat

> full access to cli?

yes

> what makes it not perform rm -rf /

by default -- regexes and prayers, but you're expected to use sandboxing