Skip to main content

What could go wrong giving full shell access to chatgpt?

Project description

Shell and Coding agent on Chatgpt and Claude desktop apps

  • An MCP server on claude desktop for autonomous shell, coding and desktop control agent.
  • A custom gpt on chatgpt web/desktop apps to interact with your local shell, edit files, run code, etc.

Tests Build

[New feature] [26-Nov-2024] Claude desktop support for shell, computer-control, coding agent. src/wcgw/client/mcp_server/Readme.md

🚀 Highlights

  • Full Shell Access: No restrictions, complete control.
  • Desktop control on Claude: Screen capture, mouse control, keyboard control on claude desktop (on mac with docker linux)
  • Create, Execute, Iterate: Ask the gpt to keep running compiler checks till all errors are fixed, or ask it to keep checking for the status of a long running command till it's done.
  • Interactive Command Handling: Supports interactive commands using arrow keys, interrupt, and ansi escape sequences.
  • REPL support: [beta] Supports python/node and other REPL execution.

Claude

Full readme src/wcgw/client/mcp_server/Readme.md

Setup

Update claude_desktop_config.json

{
  "mcpServers": {
    "wcgw": {
      "command": "uvx",
      "args": ["--from", "wcgw@latest", "wcgw_mcp"]
    }
  }
}

Then restart claude app. You can then ask claude to execute shell commands, read files, edit files, run your code, etc.

ChatGPT

🪜 Steps:

  1. Run the cli client in any directory of choice.
  2. Share the generated id with this GPT: https://chatgpt.com/g/g-Us0AAXkRh-wcgw-giving-shell-access
  3. The custom GPT can now run any command on your cli

Client

You need to keep running this client for GPT to access your shell. Run it in a version controlled project's root.

Option 1: using uv [Recommended]

$ curl -LsSf https://astral.sh/uv/install.sh | sh
$ uvx wcgw@latest

Option 2: using pip

Supports python >=3.10 and <3.13

$ pip3 install wcgw
$ wcgw

This will print a UUID that you need to share with the gpt.

Chat

Open the following link or search the "wcgw" custom gpt using "Explore GPTs" on chatgpt.com

https://chatgpt.com/g/g-Us0AAXkRh-wcgw-giving-shell-access

Finally, let the chatgpt know your user id in any format. E.g., "user_id=" followed by rest of your instructions.

NOTE: you can resume a broken connection wcgw --client-uuid $previous_uuid

How it works on chatgpt app?

Your commands are relayed through a server to the terminal client. You could host the server on your own. For public convenience I've hosted one at https://wcgw.arcfu.com thanks to the gcloud free tier plan.

Chatgpt sends a request to the relay server using the user id that you share with it. The relay server holds a websocket with the terminal client against the user id and acts as a proxy to pass the request.

It's secure in both the directions. Either a malicious actor or a malicious Chatgpt has to correctly guess your UUID for any security breach.

Showcase

Claude desktop

Resize image and move it to a new dir

example

Chatgpt app

Unit tests and github actions

The first version of unit tests and github workflow to test on multiple python versions were written by the custom chatgpt

Create a todo app using react + typescript + vite

Screenshot

Privacy

The relay server doesn't store any data. I can't access any information passing through it and only secure channels are used to communicate.

You may host the server on your own and create a custom gpt using the following section.

Creating your own custom gpt and the relay server.

I've used the following instructions and action json schema to create the custom GPT. (Replace wcgw.arcfu.com with the address to your server)

https://github.com/rusiaaman/wcgw/blob/main/gpt_instructions.txt https://github.com/rusiaaman/wcgw/blob/main/gpt_action_json_schema.json

Run the server gunicorn --worker-class uvicorn.workers.UvicornWorker --bind 0.0.0.0:443 src.wcgw.relay.serve:app --certfile fullchain.pem --keyfile privkey.pem

If you don't have public ip and domain name, you can use ngrok or similar services to get a https address to the api.

The specify the server url in the wcgw command like so wcgw --server-url https://your-url/v1/register

[Optional] Local shell access with openai API key or anthropic API key

Openai

Add OPENAI_API_KEY and OPENAI_ORG_ID env variables.

Then run

uvx --from wcgw@latest wcgw_local --limit 0.1 # Cost limit $0.1

You can now directly write messages or press enter key to open vim for multiline message and text pasting.

Anthropic

Add ANTHROPIC_API_KEY env variable.

Then run

uvx --from wcgw@latest wcgw_local --claude

You can now directly write messages or press enter key to open vim for multiline message and text pasting.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

wcgw-1.5.4.tar.gz (596.0 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

wcgw-1.5.4-py3-none-any.whl (39.9 kB view details)

Uploaded Python 3

File details

Details for the file wcgw-1.5.4.tar.gz.

File metadata

  • Download URL: wcgw-1.5.4.tar.gz
  • Upload date:
  • Size: 596.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/5.1.1 CPython/3.9.20

File hashes

Hashes for wcgw-1.5.4.tar.gz
Algorithm Hash digest
SHA256 05a3778e3717cf30342030f4b13c3c54370b790806bd0b5f2a7fb0b9f4ec408a
MD5 752b3edb5295d34365f1378743552811
BLAKE2b-256 fd7cc8d663ea296e367d799c682d1fd8738b751e320416b163e78d4cfcde9105

See more details on using hashes here.

File details

Details for the file wcgw-1.5.4-py3-none-any.whl.

File metadata

  • Download URL: wcgw-1.5.4-py3-none-any.whl
  • Upload date:
  • Size: 39.9 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/5.1.1 CPython/3.9.20

File hashes

Hashes for wcgw-1.5.4-py3-none-any.whl
Algorithm Hash digest
SHA256 f1686f4f7e216c8f8b98769787821e80fd9ca58c6d81eaeae6223df4ef30da56
MD5 c1067b544711b577ef580e7aeda2ab1b
BLAKE2b-256 15a4484bb7479ad899464247f9380601a8a8f9c7940783b4af4429ffb9fff6aa

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page