If I'm following this it means you need to audit all code that the llm writes though as anything you run from another terminal window will be run as you with full permissions.