Users cannot run shell commands through an event policy because of security reasons. Only CLI commands are allowed to run from an event policy action.
If a user wants to get data from PFE/KERNEL, "request pfe execute" can be used to execute PFE commands.
SLAX scripts can use <request-pfe-execute> RPC and the jcs:sysctl(..) function to get this information.