No, the point was that you don’t have access to a CLI in every environment.
You could have access to a web browser or web request tool instead.
There is no world in which an enterprise is not OK with an agent having access to a CLI but is OK with possibly getting prompt injected from a random web search.
You could have access to a web browser or web request tool instead.
There is no world in which an enterprise is not OK with an agent having access to a CLI but is OK with possibly getting prompt injected from a random web search.