Ensure code based agent doesn't allow scope escalation

[Pwuts]

• Part of feat(agent): Introduce Python code execution as prompt strategy #7142

Operations that should not be allowed (by default):

• Executing shell commands through subprocess.run(..) or os.system(..)
• Access files outside of the agent's file workspace
  • suggestion: inject a wrapped version of open() into the execution namespace

[github-actions]

This issue has automatically been marked as stale because it has not had any activity in the last 50 days. You can unstale it by commenting or removing the label. Otherwise, this issue will be closed in 10 days.

[github-actions]

This issue was closed automatically because it has been stale for 10 days with no activity.