shell_exec

What it does

• Executes a shell command inside the sandboxed coder container.
• Captures stdout, stderr, and exit code.
• Bash, Python, Node, and common CLI tools (jq, curl, git) are pre-installed.

API spec

{
  "name": "shell_exec",
  "input_schema": {
    "properties": {
      "command": { "type": "string" },
      "timeout_seconds": { "type": "integer", "default": 60 },
      "cwd": { "type": "string" }
    },
    "required": ["command"]
  }
}

Security

Runs in an ephemeral Docker container per run. No outbound network unless explicitly enabled. 60-second default timeout. Read-only mount for /etc; writable scratch for /work.

Used by

Gotchas

• No persistent state between calls within a run; export to file_write if you need it.
• Network egress is opt-in; bare curl will fail unless your run enables it.