deno-sandbox
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the official Deno package
@deno/sandboxvia the JSR registry (jsr:@deno/sandbox). This is a legitimate resource maintained by the skill's authoring organization. - [COMMAND_EXECUTION]: The skill documents the
sandbox.spawnmethod, which is the primary intended functionality of the SDK. The documentation emphasizes security by demonstrating how to restrict permissions (e.g., using--allow-none) and implement timeouts to prevent denial-of-service or unauthorized access by the untrusted code. - [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external data and code (e.g.,
executeAgentTool). It mitigates risks by recommending full isolation in Firecracker microVMs and performing validation on the execution results (usingJSON.parserather than direct execution).
Audit Metadata