jupyter-notebook
Warn
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions require cloning a third-party repository from GitHub (
https://github.com/hamelsmu/hamelnb.git) to the local environment at~/.agent-skills/hamelnb. - [REMOTE_CODE_EXECUTION]: The skill relies on executing code via a downloaded Python script (
jupyter_live_kernel.py) usinguv run. This allows for the execution of arbitrary Python code within the agent's environment. - [COMMAND_EXECUTION]: The setup instructions direct the user to start a Jupyter server with security features explicitly disabled, specifically using
--IdentityProvider.token='',--ServerApp.password='', and--ServerApp.disable_check_xsrf=True. This configuration exposes a local web service that can execute arbitrary Python code without any authentication, posing a risk if other local applications or malicious web content interact with the exposed port (8888).
Audit Metadata