sandbox-escape-techniques
Audited by Socket on Sep 15, 2026
2 alerts found:
MalwareSecurityMALICIOUS. The skill is an offensive breakout and exfiltration playbook for AI agents: it teaches sandbox escape, host/container access, shell spawning, and arbitrary data theft. There is little supply-chain risk because nothing is installed, but the operational capability is fundamentally dangerous and unsuitable as a normal skill.
This fragment is explicitly designed to bypass Linux sandboxing (seccomp) and achieve offensive outcomes: opening a protected file ("/flag"), executing a shell, injecting syscalls into another process via ptrace, and exfiltrating data using file/pipe primitives such as sendfile/splice/tee or cross-process memory access. While the snippet alone is insufficient to prove what a specific dependency does at runtime, the content is strongly consistent with malicious tooling/sandbox-escape guidance and would be considered a severe supply-chain red flag if found inside a package’s executable code.