upstash-box-py
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of the
upstash-boxSDK and facilitates cloning remote Git repositories directly into the sandboxed environment. - [COMMAND_EXECUTION]: Provides tools for executing shell commands and interactive sessions within the isolated container, which is the primary intended function of the sandbox service.
- [DYNAMIC_EXECUTION]: Allows for the runtime execution of dynamically generated code snippets (Python, JavaScript, TypeScript) inside the sandbox via the
box.exec.codeinterface. - [REMOTE_CODE_EXECUTION]: Supports loading external agent skills from a registry and connecting to remote Model Context Protocol (MCP) servers to extend the agent's capabilities.
- [PERSISTENCE]: Includes a built-in scheduling system to create and manage recurring cron tasks for commands or agent prompts within the box.
- [SAFE]: As an official SDK documentation for a sandbox service, the skill includes security-focused features such as network policies for outbound traffic control and guidance on using environment variables for secret management.
Audit Metadata