open-terminal
An official Open WebUI open-source project providing a Python package with a REST API for file system interaction and command execution. It serves as a terminal access layer for agents and supports multiple Docker image variants.
Timeline (last 90 days)
The open-terminal project provides a Python package that exposes a REST API for file system interaction and command execution, serving as a terminal for agents.
open-terminal provides four image variants: latest (approximately 4 GB, with a full C++/Python/Node.js/data science library stack), slim (with only git additionally bundled), alpine (approximately 230 MB), and openshift (constrained by SCC).
open-terminal is essentially a command execution agent running inside an isolated container; LLM commands are confined within the container and cannot directly access the host file system unless host directories are explicitly mounted.
When a host code directory is mounted into the container, the agent gains the ability to modify files on the host, which is both a prerequisite for modifying the codebase and a potential source of risk.
In production environments, it is recommended to tighten open-terminal's attack surface with read-only mounts, network isolation, and strict CORS policies.
All Facts (5)
The open-terminal project provides a Python package that exposes a REST API for file system interaction and command execution, serving as a terminal for agents.
50%Unverifiedopen-terminal provides four image variants: latest (approximately 4 GB, with a full C++/Python/Node.js/data science library stack), slim (with only git additionally bundled), alpine (approximately 230 MB), and openshift (constrained by SCC).
50%Unverifiedopen-terminal is essentially a command execution agent running inside an isolated container; LLM commands are confined within the container and cannot directly access the host file system unless host directories are explicitly mounted.
50%UnverifiedWhen a host code directory is mounted into the container, the agent gains the ability to modify files on the host, which is both a prerequisite for modifying the codebase and a potential source of risk.
50%UnverifiedIn production environments, it is recommended to tighten open-terminal's attack surface with read-only mounts, network isolation, and strict CORS policies.
50%