๐ smolagents v1.21.0 is here! Now with improved safety in the local Python executor: dunder calls are blocked! โ ๏ธ Still, not fully isolated: for untrusted code, use a remote executor instead: Docker, E2B, Wasm. โจ Many bug fixes: more reliable code. ๐ https://github.com/huggingface/smolagents/releases/tag/v1.21.0
๐ New in smolagents v1.20.0: Remote Python Execution via WebAssembly (Wasm)
We've just merged a major new capability into the smolagents framework: the CodeAgent can now execute Python code remotely in a secure, sandboxed WebAssembly environment!
๐ง Powered by Pyodide and Deno, this new WasmExecutor lets your agent-generated Python code run safely: without relying on Docker or local execution.
Why this matters: โ Isolated execution = no host access โ No need for Python on the user's machine โ Safer evaluation of arbitrary code โ Compatible with serverless / edge agent workloads โ Ideal for constrained or untrusted environments
This is just the beginning: a focused initial implementation with known limitations. A solid MVP designed for secure, sandboxed use cases. ๐ก
๐ก We're inviting the open-source community to help evolve this executor: โข Tackle more advanced Python features โข Expand compatibility โข Add test coverage โข Shape the next-gen secure agent runtime
Let's reimagine what agent-driven Python execution can look like: remote-first, wasm-secure, and community-built.
This feature is live in smolagents v1.20.0! Try it out. Break things. Extend it. Give us feedback. Let's build safer, smarter agents; together ๐ง โ๏ธ
๐ SmolAgents v1.19.0 is live! This release brings major improvements to agent flexibility, UI usability, streaming architecture, and developer experience: making it easier than ever to build smart, interactive AI agents. Here's what's new:
๐ง Agent Upgrades - Support for managed agents in ToolCallingAgent - Context manager support for cleaner agent lifecycle handling - Output formatting now uses XML tags for consistency
๐ฅ๏ธ UI Enhancements - GradioUI now supports reset_agent_memory: perfect for fresh starts in dev & demos.
๐ Streaming Refactor - Streaming event aggregation moved off the Model class - โก๏ธ Better architecture & maintainability
๐ฆ Output Tracking - CodeAgent outputs are now stored in ActionStep - โ More visibility and structure to agent decisions
๐ Bug Fixes - Smarter planning logic - Cleaner Docker logs - Better prompt formatting for additional_args - Safer internal functions and final answer matching
๐ Docs Improvements - Added quickstart examples with tool usage - One-click Colab launch buttons - Expanded reference docs (AgentMemory, GradioUI docstrings) - Fixed broken links and migrated to .md format
Yesterday, we dropped a new conversational viewer for datasets on the hub! ๐ฌ
Actually being able to view and inspect your data is extremely important. This is a big step in making data more accessible and actionable for everyone.
New in smolagents v1.16.0: ๐ Bing support in WebSearchTool ๐ Custom functions & executor_kwargs in LocalPythonExecutor ๐ง Streaming GradioUI fixes ๐ Local web agents via api_base & api_key ๐ Better docs
smolagents v1.14.0 is out! ๐ ๐ MCPClient: A sleek new client for connecting to remote MCP servers, making integrations more flexible and scalable. ๐ชจ Amazon Bedrock: Native support for Bedrock-hosted models. SmolAgents is now more powerful, flexible, and enterprise-ready. ๐ผ
๐ New smolagents update: Safer Local Python Execution! ๐ฆพ๐
With the latest release, we've added security checks to the local Python interpreter: every evaluation is now analyzed for dangerous builtins, modules, and functions. ๐
Here's why this matters & what you need to know! ๐งต๐
1๏ธโฃ Why is local execution risky? โ ๏ธ AI agents that run arbitrary Python code can unintentionally (or maliciously) access system files, run unsafe commands, or exfiltrate data.
2๏ธโฃ New Safety Layer in smolagents ๐ก๏ธ We now inspect every return value during execution: โ Allowed: Safe built-in types (e.g., numbers, strings, lists) โ Blocked: Dangerous functions/modules (e.g., os.system, subprocess, exec, shutil)
4๏ธโฃ Security Disclaimer โ ๏ธ ๐จ Despite these improvements, local Python execution is NEVER 100% safe. ๐จ If you need true isolation, use a remote sandboxed executor like Docker or E2B.
5๏ธโฃ The Best Practice: Use Sandboxed Execution ๐ For production-grade AI agents, we strongly recommend running code in a Docker or E2B sandbox to ensure complete isolation.
6๏ธโฃ Upgrade Now & Stay Safe! ๐ Check out the latest smolagents release and start building safer AI agents today.
๐ Big news for AI agents! With the latest release of smolagents, you can now securely execute Python code in sandboxed Docker or E2B environments. ๐ฆพ๐
Here's why this is a game-changer for agent-based systems: ๐งต๐
1๏ธโฃ Security First ๐ Running AI agents in unrestricted Python environments is risky! With sandboxing, your agents are isolated, preventing unintended file access, network abuse, or system modifications.
2๏ธโฃ Deterministic & Reproducible Runs ๐ฆ By running agents in containerized environments, you ensure that every execution happens in a controlled and predictable settingโno more environment mismatches or dependency issues!
3๏ธโฃ Resource Control & Limits ๐ฆ Docker and E2B allow you to enforce CPU, memory, and execution time limits, so rogue or inefficient agents donโt spiral out of control.
4๏ธโฃ Safer Code Execution in Production ๐ญ Deploy AI agents confidently, knowing that any generated code runs in an ephemeral, isolated environment, protecting your host machine and infrastructure.
5๏ธโฃ Easy to Integrate ๐ ๏ธ With smolagents, you can simply configure your agent to use Docker or E2B as its execution backendโno need for complex security setups!
6๏ธโฃ Perfect for Autonomous AI Agents ๐ค If your AI agents generate and execute code dynamically, this is a must-have to avoid security pitfalls while enabling advanced automation.
๐ Introducing @huggingface Open Deep-Research๐ฅ
In just 24 hours, we built an open-source agent that: โ Autonomously browse the web โ Search, scroll & extract info โ Download & manipulate files โ Run calculations on data
If you haven't seen yet, we just released Inference Providers ๐
> 4 new serverless inference providers on the Hub ๐คฏ > Use your HF API key or personal key with all providers ๐ > Chat with Deepseek R1, V3, and more on HF Hub ๐ > We support Sambanova, TogetherAI, Replicate, and Fal.ai ๐ช
Best of all, we don't charge any markup on top of the provider ๐ซฐ Have you tried it out yet? HF Pro accounts get $2 of free usage for the provider inference.