octomind

The server offers powerful AI capabilities, including direct shell command execution (`shell()` tool), extensive file system modifications (`text_editor()` tools like `create`, `str_replace`, `insert`, `line_replace`, `batch_edit`), and semantic code refactoring (`ast_grep()` tool). These features grant the AI significant control over the local environment. While the implementation isolates spawned child processes and uses environment variables for API keys (good practices), the inherent design allows the AI to execute arbitrary commands and make substantial changes. If a malicious prompt is introduced or the AI misinterprets instructions, this could lead to unintended or destructive actions. Therefore, it is *not inherently safe* to run without careful monitoring and a trusted AI model. The WebSocket server (defaulting to `127.0.0.1:8080`) should not be exposed to the public internet.