The safeguards map / 3.2 Agent harnesses

smolagents

Hugging Face (company). No foundation, released. Apache-2.0. Mapped; as of .

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

A code-writing agent library whose local executor refuses imports not on an authorization list the developer sets.

Where it sits

3.2 Agent harnesses (primary): Executes agent-written Python in its own interpreter that disallows imports unless the developer adds them to an authorization list.

By default, imports are disallowed unless they have been explicitly added to an authorization list by the user.

captured

To add a first layer of security, code execution in smolagents is not performed by the vanilla Python interpreter.

captured

Facts

Concern
securitysafety
Names the law
no
Subject
agent
Used by
those who make it
Runs
at runtime
Policy comes from
owner-entered settings
Can the agent bypass it
depends

Handoffs

produces Runtime records: OpenTelemetry traces

Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.