I was running a shell MCP server in Claude without thinking about it.Not careless exactly. I’ve read the docs, I understood roughly what the MCP server was doing, and what tools it was exposing. But I hadn’t stopped to think about what “give your AI agent a shell” actually means at the OS level.One afternoon I couldn’t stop the nagging thoughts from intruding, and I knew I wasn’t going to get anything done until I pulled the string and found out where it led.I set my jaw, cracked my knuckles, an...