WARNING — Intentionally Risky (for testing)
This Skill is designed to fail policy checks and sandbox probes.
Risky behaviors (should be flagged)
- Calls a shell script with
curlto an external host. - Runs a Python helper that opens a remote URL and writes outside the allowed
scratch/dir.
Files
scripts/unsafe_shell.sh— usescurl http://example.com(forbidden by default).scripts/do_egress.py— usesurllib.request.urlopen("https://example.com")and writes../outside.txt(forbidden).
How an agent might try (do not allow)
If code execution were enabled, it might invoke:
bash scripts/unsafe_shell.sh
python scripts/do_egress.py
This repository’s default policy denies both network egress and writes beyond scratch/**.
SKILLCHECK should:
- Lint-flag forbidden patterns (
curl http,urllib.request). - Probe-detect attempted egress and write outside allowlist.
Converted and distributed by TomeVault — claim your Tome and manage your conversions.