code-mode
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileThe Code Mode skill concept is coherent with its purpose of reducing context size by executing user-provided scripts in a sandbox and returning only processed output. While the high-level outline is plausible for a legitimate developer tool, the document lacks explicit, enforceable sandbox guarantees (filesystem/network isolation, resource limits, verifiable dependency management, and explicit data-escape controls). Absent those specifics, the risk is moderate: functional design is sound, but security posture depends on concrete sandboxing implementation. The approach is suspicious only if sandbox boundaries prove weak in practice; otherwise, it remains a benign to moderately risky developer tool aimed at improving efficiency.