"os.system(f'pip install {library}')"

Update: This was found in an older version of CrewAI's code interpreter. CrewAI has since removed the tool entirely. The finding is real but historical. The point is the class of problem, not the specific instance. I've been building a static effect analyzer. You point it at a Python or TypeScript file and it tells you what each function does to the outside world: network, filesystem, database, subprocess, etc. I ran it on CrewAI's code interpreter and got this: $ libgaze check code_interpreter.