Comment by vorticalbox

that is not an model issue but a harness one, if you don't want it to have io to files or run command then simple don't give it access to the tools.