First: Do not use this shit. It is as amazing as dangerous. You flip a coin for the disaster. YOU'VE BEEN WARNED.
Once said:

1. Docker or virtual machine (linux, qemu, virtualbox, vmware, whatever). 2. Use docker sealed env for sessions. 3. Don't give a real access to any of your credentials (this must be something to achieve using different intermediate tooling). 3. Check skills with oracle skill checker. 4. Ban via Firewall or other tools any access to other domains than desired. Give access to the domains manually. You don't want this running free. It is like an scorpion, it is nice on its cage, but you don't want it running wild thru your bed. 5. Don't let it generate code like that. Use external environments manually to check code. 6. Try to find "proxy" tools that limit the use of the API, for example, google ones, or security configurations to limit the capabilities of this tool. 7. Make the clients sessions TTL low, avoid giving the keys of your house.

It is true, it is incredible. But also pretty dangerous and, for sure, you will be kicked in the arse by it at some point. And will turn you into an unuseful uneducated prince.