secure-python-code-sandbox
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The
invokeaction allows for the execution of arbitrary Python code within a remote sandbox environment managed by the vendor infrastructure atapi.agentpmt.com. - [EXTERNAL_DOWNLOADS]: The skill provides installation instructions that use
npx skills addto fetch and configure auxiliary setup skills from the vendor's repository atgithub.com/AgentPMT/agent-skills. - [DATA_EXFILTRATION]: The sandbox environment includes the
requestslibrary, which enables the execution of network operations to external domains as part of the tool's intended API integration and web scraping capabilities. - [PROMPT_INJECTION]: The skill processes code provided via the
codeparameter, which presents a surface for indirect prompt injection if the input is derived from untrusted sources. - Ingestion points: The
codeparameter within theinvokeaction defined inschema.md. - Boundary markers: No explicit delimiters or instructions for the agent to ignore embedded commands within the input code are defined.
- Capability inventory: The environment supports arbitrary Python code execution, network access via
requests, and file/data manipulation usingnumpyandpandasas described inSKILL.md. - Sanitization: The skill documentation does not describe explicit sanitization or validation of the input code string before execution.
Audit Metadata