Run the JS function in the isolated VM — or, build a safe eval function

[mgilangjanuar]

Problem:

There's a vuln in the agentify-script which uses the eval function and can run anything from user code.

Expectation:

Need a dependency like isolated-vm but can include global native JS functions/objects such as: fetch, btoa, URL.searchParams, Buffer, JSON, etc.

[mgilangjanuar]

Temporary workaround:

The agentify-script should be deployed in a different machine as a microservice for agentify. If, someday it destroys the machine -> re-deploy the dep, lol.