Haha that answer it gave you isn't actually correct: it CAN run arbitrary shell commands but you have to convince it to use Python's http://
subprocess.run(…, shell=True) You can even get it to run PHP or Deno or Lua if you know what you're doing https://
til.simonwillison.net/llms/code-inte
rpreter-expansions
…
LLM Code Execution Vulnerabilities: Shell Commands and Arbitrary Code
By
–