sandbox-stable
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Cloudflare documentation at developers.cloudflare.com and public GitHub repositories under the cloudflare organization. These references are for legitimate SDK usage and documentation purposes.
- [COMMAND_EXECUTION]: Describes the use of SDK methods such as sandbox.exec() and sandbox.terminal() for executing commands and managing interactive shells within isolated Cloudflare Containers. This is the intended primary purpose of the Sandbox SDK.
- [INDIRECT_PROMPT_INJECTION]: While the skill documents tools that ingest strings for command execution (a common injection surface), it is a developer guidance tool for an official product. The skill includes best-practice advice to keep live credentials out of the sandbox environment to mitigate risks.
- [NO_CODE]: The skill consists primarily of documentation, guidelines, and API reference maps, without shipping its own executable scripts or complex logic.
Audit Metadata