Skills
Navigate
skills/tao3k/omnibus-ncl/nsjail/Gen Agent Trust Hub

nsjail

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The nsjail_run function in scripts/commands.py facilitates the execution of arbitrary commands within an nsjail sandbox.
  • [COMMAND_EXECUTION]: The implementation utilizes subprocess.run with a list of arguments and shell=False, which is a recommended security practice to mitigate shell injection risks.
  • [COMMAND_EXECUTION]: The sandbox configuration mounts key system directories (/, /tmp, /usr) in read-only or restricted modes by default, leveraging nsjail's isolation features.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 01:13 PM
Security Audit — agent-trust-hub — nsjail