azuresphere7 / smartgpt

🛠 SmartGPT is an experimental program meant to provide LLMs (particularly GPT-3.5 and GPT-4) with the ability to complete complex tasks without user input by breaking them down into smaller problems, and collecting information using the internet and other external sources.

SmartGPT

---

SmartGPT is an experimental program meant to provide LLMs (particularly GPT-3.5 and GPT-4) with the ability to complete complex tasks without user input by breaking them down into smaller problems, and collecting information using the internet and other external sources.

If you're interested in keeping up with the progress of SmartGPT, want to contribute to development, or have issues to discuss, join the SmartGPT Discord.

SmartGPT.Demonstration.with.Rust.Essay.mp4

Why?

There are many existing solutions to allowing LLMs to perform more complex tasks, such as Auto-GPT and BabyAGI. So, why SmartGPT?

• Modularity: With first class plugin support and the ability to compose Autos for whatever your project requires, SmartGPT is incredibly modular.

• Flexibility: SmartGPT has one config.yml file that is automatically generated where you can configure everything and anything.

• Consistency: SmartGPT has a smart system of dynamically executing actions and static tool-chaining to provide incredible consistent results.

There are two main shortcomings, however.

• Ecosystem: Due to its popularity, AutoGPT is a very polished and refined tool. It has many more tools and integrations with memory systems. To go with this, the codebase has been through large scrutiny, so it is generally less buggy and more tested than SmartGPT.

• Memory Management: Due to the extreme youth of this project, there is only one simple but limited memory system. However, this will change with time.

Supporting Development

Currently, testing with SmartGPT is primarily being done with GPT3.5, and occasionally with GPT4, due to the costs of more-expensive models. As this project matures, we're aiming to experiment both with multiple agents at once and using GPT4 much more to unleash maximum capabilities out of LLMs. This is expensive though, and as the core maintainer of SmartGPT, I'm still a high school student, and funding a project like this is difficult for me. If you're interest in helping push the boundaries of LLMs, consider joining our Patreon.

Disclaimer

SmartGPT is an incredibly experimental application. The goal is to unlock maximum potential out of LLMs, and stability is sacrificed for this. Backwards compatibility is a fever dream here. However, SmartGPT is also housing some of the most innovative ideas and experiments in the AutoGPT space right now, and although most are unsuccessful, a few hit the dart-board and stick.

Quickstart

1. Install cargo, preferably the latest stable version.

2. Clone the repository with git clone https://github.com/azuresphere7SmartGPT.git && cd SmartGPT.

3. Run it in release mode with cargo run --release. This will create a config.yml for you.

4. Adjust the config to your liking, and execute it once again.

How SmartGPT Works

Autos

Autos are the building blocks of SmartGPT. There are two types of Autos.

• Runner: A runner is given a single task, and is asked to complete it.
• Assistants: An Assistant Auto can be conversed with, and will give you responses back, in context of the conversation.

Assistants are highly experimental, so we recommend Runners.

An Auto will under the hood, run agent. An agent has two parts: The Dynamic Agent and The Static Agent.

Dynamic Agent

The Dynamic Agent is the base agent. It runs a REACT-esque process, thinking, reasoning, and then making a decision. It can do one of three things:

• Brainstorm.
• Run an action.
• Give the user a final response.

When it runs an action, the Static Agent is dispatched to run the action.

Static Agent

The Static Agent runs the subtasks given to it by the Dynamic Agent. Here's how it works:

1. It plans out each tool that is needed in the precise order to complete the task.
2. One by one, it'll run each step of the plan, filling in the arguments for the tool.

The Static Agent also saves assets that the Dynamic Agent can pass back to the Static Agent for future tasks.

Memory

Agents all have memory. After completing a task, the agent will save a list of all observations into long-term memory. Once it starts another task, it will pull all long-term memories related to the task (using a VectorDB for this.)

Plugin System

Autos can use a set of tools such as google_search, browse_url, etc. You define these using plugins. Plugins define their own set of tools, and can have their own data.

License

smartgpt is available under the MIT license. See LICENSE for the full license text.

smartgpt's Issues

Fix XSS Vulnerability in User Profile Page

We have identified a cross-site scripting (XSS) vulnerability in the user profile page of our application. This vulnerability allows malicious users to inject and execute arbitrary JavaScript code in the context of other users' browsers, potentially leading to data theft or unauthorized actions.

Steps to Reproduce:

Log in as a regular user (non-admin).
Navigate to the user profile page.
In the "About Me" section, enter the following payload: <script>alert('XSS')</script>.
Save the profile changes.
Visit the user profile page again to trigger the XSS attack.
Current Behavior:

The entered JavaScript payload gets executed when viewing the user profile page, indicating a successful XSS attack.

Expected Behavior:

The application should properly sanitize user input in the user profile page to prevent XSS attacks. Any injected scripts or malicious code should be neutralized or escaped to ensure the security of the application.

Proposed Solution:

Implement input validation and sanitization functions to filter out malicious code from user inputs.
Use content security policies (CSP) to restrict the execution of inline scripts and other potentially risky content.
Conduct thorough testing to ensure that the fix effectively mitigates the XSS vulnerability without introducing regressions or other security issues.