jupyter-live-kernel
Warn
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Executes arbitrary Python code via a live Jupyter kernel session.
- [PRIVILEGE_ESCALATION]: Setup instructions include the
--AllowRoot=Trueflag, enabling the server to potentially run with elevated permissions. - [DYNAMIC_EXECUTION]: Provides a stateful REPL environment for runtime code execution and state persistence.
- [EXTERNAL_DOWNLOADS]: Recommends installing the
jupyterlabpackage, a well-known data science tool, via theuvpackage manager. - [INDIRECT_PROMPT_INJECTION]: Processing of notebook files (
.ipynb) creates a vulnerability surface for instructions embedded in external data.
Audit Metadata