You have to have fixed commands that LLM could execute, just limit its universe. I don't think it is a good practice to give LLMs access to everything.