bailian-sandbox
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes lifecycle management commands for cloud sandboxes using the
blCLI tool.- [CREDENTIALS_UNSAFE]: The skill provides clear instructions for the secure handling of API keys and session tokens, including the use of restricted-permission temporary directories and redaction of secrets in user-facing output.- [DYNAMIC_EXECUTION]: The skill contains Python and Node.js code snippets designed to be run by the agent to interact with the sandbox runtime (WebShell and CDP). These are standard operational templates.- [EXTERNAL_DOWNLOADS]: The skill references thepuppeteer-coreNode.js package for browser automation tasks. This is a well-known and legitimate dependency for the described functionality.
Audit Metadata