Giving an AI the terminal: 7 security habits for a small business
The terminal is the most powerful tool an AI can use on a computer. Seven practical habits, based on CNIL recommendations, to use it without bad surprises.
The terminal lets an AI install a tool, convert files in bulk or diagnose a problem in seconds. It is also the riskiest tool: a command can delete, overwrite or send files, with the rights of the computer’s account. Here are seven simple habits to benefit from it without bad surprises.
1. Use an account without administrator rights
SteerLatch acts with the rights of the account that installed it. If that account is an administrator, so is every command from the AI. The CNIL recommends keeping user rights to the strict minimum (sheet 6). For everyday use, install SteerLatch on a standard account.
2. Define a working folder
Ask the AI to work in a specific folder and name it in your request. For bulk operations (renaming, converting, sorting), run them on a copy first.
3. Back up first
Nothing automatically undoes what a command changed. A recent, tested backup is your only real way back. See backing up with the 3-2-1 rule.
4. Read the command before accepting it
MCP lets each tool declare whether it can modify data, and SteerLatch flags the terminal accordingly. Depending on its own rules, your AI can then show you the command and ask for confirmation. Take the time to read it: an rm, a del, a Remove-Item or a > that overwrites a file should make you pause.
5. Keep secrets out of reach
What the AI reads (command output, file contents) goes to its provider. Do not have it browse folders holding passwords, API keys or bank exports, and never paste an access code into the chat.
6. Know how to stop
For a single command that never ends, ask the AI to stop it (the “Stop a command” tool). To stop everything on the computer, use STOP from your account or, on a Mac, from the menu bar icon: new actions are blocked and those in progress interrupted. A program a command started separately may still keep running, so check afterwards.
7. Isolate risky operations
To try an unknown tool or a script found online, the CNIL suggests an isolated environment such as a temporary virtual machine (sheet 6). A computer dedicated to tests does the same job.
Summary
- Standard account, not administrator.
- Named working folder, a copy for bulk operations.
- Recent backup before starting.
- Command read before it is accepted.
- No secrets in the folders browsed.
- “Stop a command” for one command, STOP for everything.
- Virtual machine or test computer for the unknown.
The SteerLatch terminal is not a sandbox: these habits do not replace your judgment, they make it easier. Read also: AI remote maintenance and the SteerLatch help.