smol code has RCE risk granting model unrestricted access to local environment.

that is by design

intentionally moving the security boundary to where it should be (the environment)