regrettably i've yet to find an LLM which can run shell commands on its host, or even one that will play along with my LARP and print fake error messages about missing .so files.
If you cheat using an "agent" using an "MCP server", it's still rm -rf on the host, but in a form that AI startups will sell to you.
MCPs are generally a little smarter than exposing all data on the system to the service they're using, but you can tell the chatbot to work around those kinds of limitations.
Agent-style AI can run shell commands. You have to accept them but some people live dangerously and say Yes To All.