gd3kr / BlenderGPT

Use commands in English to control Blender with OpenAI's GPT-4
MIT License
4.36k stars 312 forks source link

safety properties of direct execution of ai-generated code #26

Open fche opened 1 year ago

fche commented 1 year ago

This line seems to straight execute python code that comes from the LLM.

https://github.com/gd3kr/BlenderGPT/blob/990068512ed9ee0c37091a3295157724e5a0dd13/__init__.py#L254

What if any assurance exists that the code cannot possibly contain malware that could damage the blender internal data, or perhaps even run arbitrary code with the invoking user's privileges?