# Risky Net Egress

> Demonstrates unsafe patterns for testing audits. Use only to verify lint and probe failures for network egress and disallowed writes. Use when this capability is needed.

- Skill: `tomevault-io/risky-net-egress` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/risky-net-egress`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/risky-net-egress/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/risky-net-egress

---


# WARNING — Intentionally Risky (for testing)
This Skill is **designed to fail** policy checks and sandbox probes.

## Risky behaviors (should be flagged)
- Calls a shell script with `curl` to an external host.
- Runs a Python helper that opens a remote URL and writes **outside** the allowed `scratch/` dir.

## Files
- `scripts/unsafe_shell.sh` — uses `curl http://example.com` (forbidden by default).
- `scripts/do_egress.py` — uses `urllib.request.urlopen("https://example.com")` and writes `../outside.txt` (forbidden).

## How an agent might try (do not allow)
If code execution were enabled, it might invoke:
```bash
bash scripts/unsafe_shell.sh
python scripts/do_egress.py
```

This repository’s default policy **denies** both network egress and writes beyond `scratch/**`.
SKILLCHECK should:

1. Lint-flag forbidden patterns (`curl http`, `urllib.request`).
2. Probe-detect attempted egress and write outside allowlist.

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/jlov7) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-15 -->