Bash shell access for agent automations. High-power, high-risk; pair with Docker sandbox.