Doesn’t that have more to do with the templating of tool-calls and how using them are presented to the models?

Or is that just why my model likes to break out of the sandbox, going strait to exec shell command and editing files using python on the cli?