use safe_load for yaml

Author: logan-markewich

llama_hub/tools/chatgpt_plugin/README.md

@@ -11,7 +11,7 @@ This tool has more extensive example usage documented in a Jupyter notebook [her
 import requests
 import yaml
 f = requests.get('https://raw.githubusercontent.com/sisbell/chatgpt-plugin-store/main/manifests/today-currency-converter.oiconma.repl.co.json').text
-manifest = yaml.load(f, Loader=yaml.Loader)
+manifest = yaml.safe_load(f)
 
 from llama_hub.tools.chatgpt_plugin import ChatGPTPluginToolSpec
 from llama_index.agent import OpenAIAgent

llama_hub/tools/chatgpt_plugin/base.py

@@ -31,7 +31,7 @@ def __init__(
             pass
         elif manifest_url:
             response = requests.get(manifest_url).text
-            manifest = yaml.load(response, Loader=yaml.Loader)
+            manifest = yaml.safe_load(response)
         else:
             raise ValueError("You must provide either a manifest or a manifest_url")
 

llama_hub/tools/notebooks/chatgpt_plugin.ipynb

@@ -27,7 +27,7 @@
     "f = requests.get(\n",
     "    \"https://raw.githubusercontent.com/sisbell/chatgpt-plugin-store/main/manifests/today-currency-converter.oiconma.repl.co.json\"\n",
     ").text\n",
-    "manifest = yaml.load(f, Loader=yaml.Loader)"
+    "manifest = yaml.safe_load(f)"
    ]
   },
   {

llama_hub/tools/notebooks/openapi_and_requests.ipynb

@@ -28,7 +28,7 @@
     "f = requests.get(\n",
     "    \"https://raw.githubusercontent.com/APIs-guru/openapi-directory/main/APIs/openai.com/1.2.0/openapi.yaml\"\n",
     ").text\n",
-    "open_api_spec = yaml.load(f, Loader=yaml.Loader)"
+    "open_api_spec = yaml.safe_load(f)"
    ]
   },
   {
@@ -240,4 +240,4 @@
  },
  "nbformat": 4,
  "nbformat_minor": 5
-}
+}

llama_hub/tools/openapi/README.md

@@ -14,7 +14,7 @@ from llama_hub.tools.openapi import OpenAPIToolSpec
 from llama_index.agent import OpenAIAgent
 
 f = requests.get('https://raw.githubusercontent.com/APIs-guru/openapi-directory/main/APIs/openai.com/1.2.0/openapi.yaml').text
-open_api_spec = yaml.load(f, Loader=yaml.Loader)
+open_api_spec = yaml.safe_load(f)
 # OR
 open_spec = OpenAPIToolSpec(url='https://raw.githubusercontent.com/APIs-guru/openapi-directory/main/APIs/openai.com/1.2.0/openapi.yaml')
 

llama_hub/tools/openapi/base.py

@@ -26,7 +26,7 @@ def __init__(self, spec: Optional[dict] = None, url: Optional[str] = None):
             pass
         elif url:
             response = requests.get(url).text
-            spec = yaml.load(response, Loader=yaml.Loader)
+            spec = yaml.safe_load(response)
         else:
             raise ValueError("You must provide a url or OpenAPI spec as a dict")