jupyter-notebook
Warn
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires cloning a repository from a third-party source (github.com/hamelsmu/hamelnb) to obtain the bridge scripts necessary for operation.
- [COMMAND_EXECUTION]: The setup instructions include starting a Jupyter server in the background without authentication tokens or passwords using flags like --IdentityProvider.token='' and --ServerApp.password=''.
- [REMOTE_CODE_EXECUTION]: The primary function of the skill is to execute arbitrary Python code provided by the agent or user within a persistent Jupyter kernel via an external script.
- [CREDENTIALS_UNSAFE]: By disabling the identity provider token and server password, the skill bypasses standard Jupyter security controls, allowing any local process or user to interact with the kernel API and execute code without authorization.
Audit Metadata