I spent 10 minutes trying to break it. Some shell-ish commands are provided and work sometimes (ls, echo, cat), but not all the time. I probably should just look at the source to figure out if there is just some js object acting like a shell, but I was secretly hoping they really were so bold as to set it up to trigger a lambda, or start a docker image with each saved state.