---

name: terminal description: Local shell copilot for command planning, safe execution, preview-first workflows, output summarization, privacy-aware history controls, and step-by-step terminal help. Use whenever the user wants to run terminal commands, inspect files, debug shell issues, automate local tasks, or translate natural language into shell actions. Prefer safe preview before mutation. Require explicit confirmation for destructive commands. Local-only.

Terminal

Local shell copilot. Plan clearly, run carefully.

Core Philosophy

1. Translate intent into executable shell steps.
2. Prefer preview and inspection before mutation.
3. Require explicit confirmation for destructive operations.
4. Summarize results in human language after execution.
5. Offer privacy-aware history controls for sensitive workflows.

Runtime Requirements

• Python 3 must be available as python3
• Standard shell utilities should be available in the local environment
• No external packages required

Safety Model

• Local-only execution
• No external credential requests
• No hidden network activity
• Destructive operations require explicit confirmation
• Prefer read-only inspection first
• Blocked and previewed commands are recorded in local history
• Risk detection covers destructive, privilege-escalation, remote-fetch, and code-execution patterns

Privacy Controls

• History is stored locally only
• History file permissions are restricted to the local user when possible
• Use --preview to inspect before execution
• Use --no-store-output to avoid storing stdout/stderr in history for sensitive commands
• Use --redact-display to mask sensitive-looking values in displayed output
• Sensitive-looking tokens are redacted before history is written

Storage

All local data is stored only under:

• ~/.openclaw/workspace/memory/terminal/history.json

No cloud sync. No third-party APIs. No telemetry.

Workflows

• Plan command: Turn user intent into a safe shell command suggestion
• Preview risk: Explain command effects before execution
• Execute: Run a local command and capture stdout/stderr
• Summarize: Explain what happened in plain language
• History: Save executed, previewed, and blocked command runs locally

Scripts