Or...
don't give it access to your data/production systems.
"Not using LLMs" is a solved problem.
Yea agreed. Or use RBAC