I did similar things last year [1]. Also I tried running arbitrary binaries and that worked too. You could even run them in the GPTs. It was okay back then but not super reliable. I should try again because the newer models definitively follow prompts better from what I’ve seen.

[1]: https://huijzer.xyz/posts/openai-gpts/