agent-sandbox
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary purpose is to execute code within isolated environments using the
mcp__flow-nexus__sandbox_executetool. This tool allows for running JavaScript, Python, and other languages inside E2B sandboxes. - [DYNAMIC_EXECUTION]: The skill facilitates the creation and execution of dynamic code blocks at runtime. This is a core feature of a development sandbox and is managed through structured tools like
mcp__flow-nexus__sandbox_createandmcp__flow-nexus__sandbox_execute. - [INDIRECT_PROMPT_INJECTION]: The skill handles potentially untrusted data through code execution and file uploads, creating a vulnerability surface for indirect injection.
- Ingestion points: The
codeparameter inmcp__flow-nexus__sandbox_executeand thecontentparameter inmcp__flow-nexus__sandbox_uploadare primary entry points for external data. - Boundary markers: The instructions do not define specific delimiters for untrusted data, though they emphasize the use of isolated environments.
- Capability inventory: The skill provides capabilities for sandbox creation, code execution, file uploads/downloads, and environment management.
- Sanitization: The skill instructions recommend quality standards such as "Secure environment variable management" and "security isolation" to mitigate risks associated with processing untrusted content.
Audit Metadata