4 ms·
I was referring to letting LLM's search github and run tools from there. That's like randomly searching the internet for code snippets and blindly running them
by michaelanckaert 10mo ago
I was referring to letting LLM's search github and run tools from there. That's like randomly searching the internet for code snippets and blindly running them on your production machine.
- mkagenius 10mo agoFor that, we need sandboxes to run the code in an isolated environment.
- michaelanckaert 10mo agoSure to protect your machine, but what about data security? Do I want to allow unknown code to be run on my private/corporate data? Sandbox all you want but sooner or later your data can be exfiltrated. My point is giving an LLM unrestricted access to random code that can be run is a bad idea. Curate carefully is my approach.
- mkagenius 10mo agoFor data security, you can run sandbox locally too. See https://github.com/instavm/coderunner https://github.com/instavm/coderunner