that is not an model issue but a harness one, if you don't want it to have io to files or run command then simple don't give it access to the tools.
I mostly just need it to mostly be a very advanced NLP model that is able to figure the set of tools that it needs to call with what argument. Then it will just follow a predefined decision tree.