sandbox-editor
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill mandates a 'Zero Execution' policy, explicitly instructing the agent never to run the generated scripts. This is a critical security measure that prevents the automated execution of potentially unsafe or unverified code generated during the sandbox creation process.
- [SAFE]: The skill strictly limits its file system operations to designated sandbox directories and the
tmp/folder. It includes clear instructions to avoid any mutation of production data or modification of production source code, maintaining a clear boundary between the experimental sandbox and the production environment. - [SAFE]: External references point to well-known and reputable repositories and services, such as the Marimo reactive notebook organization on GitHub. These references are used for configuration and guidance purposes and do not involve downloading or executing untrusted code.
- [SAFE]: The instructions for adding observability focus on non-functional logging and state transition visualization. This approach assists human understanding without altering the underlying logic or behavior of the imported production code.
Audit Metadata