Agent Skills
› nodetool-ai/nodetool
› sandbox-process-hard
sandbox-process-hard
GitHub用于检测在沙箱环境中直接引用 process 对象且无防护措施的漏洞,通过扫描拒绝此类不安全代码。
Trigger Scenarios
代码审计发现未受保护的 process 引用
安全扫描报告沙箱逃逸风险
Install
npx skills add nodetool-ai/nodetool --skill sandbox-process-hard -g -y
SKILL.md
Frontmatter
{
"name": "sandbox-process-hard",
"description": "Fixture pack whose dependency reads process without a guard"
}
The scan rejects this: a free process reference throws in the guest.
Version History
- a6a7e57 Current 2026-08-20 09:51


