I like this direction. The approach of letting LLMs figure out stuff on their own is flexible but inefficient and getting more structure can be very beneficial.

Well done for actually parsing the shell commands the LLM wants to execute. Another case where doing things “the old way” is both more correct and secure