cvisor-cli
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation identifies that the macOS version of the tool requires the installation of
bsdkrunfrom the author's Homebrew tap (tsirysndr/tap/bsdkrun). - [EXTERNAL_DOWNLOADS]: The skill describes the automatic retrieval of OCI images from the GitHub Container Registry (
ghcr.io/tsirysndr/cvisor) to provision the sandboxed environment on macOS. - [COMMAND_EXECUTION]: The skill provides instructions for executing arbitrary commands within a sandboxed environment using the
cvisor -- <cmd>syntax, which is the primary intended function of the tool for isolating untrusted code. - [DATA_EXFILTRATION]: The documentation covers the
cvisor cpcommand, which allows for bidirectional file transfers between the host system and the sandbox overlay for legitimate file management tasks.
Audit Metadata