But what if shelly hallucinates with "rm -rf /" ?
It opens the command in an editor like when you run "git commit", so you can edit it. Saving executes the final version.
As others noted, "try" could be used to make the commands testable, so I'll look into it this weekend.