The newest generation of LLM-enabled applications focus on “agentic” behavior — automatically executing LLM generated commands to expand the scope beyond simple text generation. What could go wrong? Current application-layer controls are often insufficient and hypervisor-level hardening is resource-intensive. Instead, we can benefit from browser sandboxes by shifting the execution into WebAssembly. Come learn why and how to execute Python code in browsers.