sandbox-escape-techniques
Fail
Audited by Snyk on Jul 21, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). This content is an explicit, comprehensive offensive playbook for sandbox escapes and kernel/container/renderer bypasses enabling remote code execution, privilege escalation, and data exfiltration — clearly intended for abuse.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly instructs sandbox/container/chroot/browser escape techniques and gives commands (e.g., os.system('sh'), chroot/mount/nsenter/unshare, reading /proc/1/root, double-chroot, ffi.system, execl("/bin/sh")) that seek to obtain shells, access host files, change mounts/namespaces, or require privileged operations, which would compromise the machine state.
Issues (2)
E006
CRITICALMalicious code pattern detected in skill scripts.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata