Skip to main content

python-sandbox

Executes Python code in a sandbox for data analysis, visualization, and document generation, supporting complex workflows.

Install this skill

or
58/100

Security score

The python-sandbox skill was audited on Mar 1, 2026 and we found 6 security issues across 3 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 420

Direct command execution function call

SourceSKILL.md
420exec("危险代码") # ❌ 动态执行(后端限制exec_globals)
medium line 573

Template literal with variable interpolation in command context

SourceSKILL.md
573```python
medium line 421

System command execution

SourceSKILL.md
421__import__('os').system('rm') # ❌ 系统命令(网络禁用)
high line 422

Access to /etc/passwd

SourceSKILL.md
422open('/etc/passwd') # ❌ 访问系统文件(根目录只读)
low line 77

Base64 decode operation

SourceSKILL.md
77file_data = base64.b64encode(content).decode('utf-8')
low line 601

Base64 decode operation

SourceSKILL.md
601file_data = base64.b64encode(f.read()).decode('utf-8')
Scanned on Mar 1, 2026
View Security Dashboard
Installation guide →