[Feature Request] Control code excution in `CodePrompt.execute` about camel

[lightaime]

That is an awesome idea! Thanks @dandansamax.

[yhyu13]

@dandansamax Would you like to elaborate more on how ast could identify potential risks in generated py code?

[dandansamax]

@dandansamax Would you like to elaborate more on how ast could identify potential risks in generated py code?

@yhyu13 Sure. Actually it was inspired by the implementation of the hugging face agent. See python_interpreter.py.

The basic idea is to parse the generated python code through ast.parse() and check all subtress in the "ast". We only allow several types of python expressions to execute, such as variable assign, function call, ... other expressions like import are forbidden. Moreover, the code is executed manually (instead of exec). So the execution process in more secure and controllable.

[dandansamax]

#182 has been merged. Close this issue.