π smolagents v1.21.0 is here! Now with improved safety in the local Python executor: dunder calls are blocked! β οΈ Still, not fully isolated: for untrusted code, use a remote executor instead: Docker, E2B, Wasm. β¨ Many bug fixes: more reliable code. π https://github.com/huggingface/smolagents/releases/tag/v1.21.0
π New in smolagents v1.20.0: Remote Python Execution via WebAssembly (Wasm)
We've just merged a major new capability into the smolagents framework: the CodeAgent can now execute Python code remotely in a secure, sandboxed WebAssembly environment!
π§ Powered by Pyodide and Deno, this new WasmExecutor lets your agent-generated Python code run safely: without relying on Docker or local execution.
Why this matters: β Isolated execution = no host access β No need for Python on the user's machine β Safer evaluation of arbitrary code β Compatible with serverless / edge agent workloads β Ideal for constrained or untrusted environments
This is just the beginning: a focused initial implementation with known limitations. A solid MVP designed for secure, sandboxed use cases. π‘
π‘ We're inviting the open-source community to help evolve this executor: β’ Tackle more advanced Python features β’ Expand compatibility β’ Add test coverage β’ Shape the next-gen secure agent runtime
Let's reimagine what agent-driven Python execution can look like: remote-first, wasm-secure, and community-built.
This feature is live in smolagents v1.20.0! Try it out. Break things. Extend it. Give us feedback. Let's build safer, smarter agents; together π§ βοΈ