Security audit
Security checks across malware telemetry and agentic risk
This skill is a real autonomous research tool, but it defaults to broad automatic code execution with weak containment in several paths.
Install only if you are comfortable running an autonomous research system that can generate and execute code, call external LLM/search services, write persistent artifacts, and use local credentials from environment variables. Prefer Docker mode with network_policy set to none where feasible, avoid --auto-approve for untrusted topics, disable OpenCode/ACP/agentic modes unless needed, and run it in a disposable workspace with minimal secrets.
) -> dict[str, str]:
"""Execute script in a local subprocess (no sandbox)."""
try:
proc = subprocess.run(
[self._python, str(script_path.resolve())],
capture_output=True,
text=True,print(" npm is not installed. Cannot install OpenCode.")
return False
try:
r = subprocess.run(
[npm_cmd, "i", "-g", "opencode-ai@latest"],
capture_output=True, text=True, timeout=120,
)) -> subprocess.CompletedProcess[str]:
"""Run a command inside the container."""
cmd = ["docker", "exec", container, "bash", "-c", command]
return subprocess.run(
cmd,
capture_output=True,
text=True,workdir.mkdir(parents=True, exist_ok=True)
start = time.monotonic()
timed_out = False
proc = subprocess.Popen(
cmd,
stdout=subprocess.PIPE,
stderr=subprocess.PIPE,def ensure_image(image: str) -> bool:
"""Return True if *image* exists locally (does NOT pull)."""
try:
cp = subprocess.run(
["docker", "image", "inspect", image],
capture_output=True,
timeout=10,timed_out = False
try:
logger.debug("Docker run command: %s", cmd)
completed = subprocess.run(
cmd,
capture_output=True,
text=True,result: SandboxResult
try:
env = {**os.environ, "PYTHONUNBUFFERED": "1"}
completed = subprocess.run(
command,
capture_output=True,
text=True,result: SandboxResult
try:
env = {**os.environ, "PYTHONUNBUFFERED": "1"}
completed = subprocess.run(
command,
capture_output=True,
text=True,# Check if already installed
try:
result = subprocess.run(
[str(python), "-c", "import torch; print(torch.__version__)"],
capture_output=True,
text=True,pip_cmd = [str(python), "-m", "pip", "install", "--quiet", "torch"]
try:
result = subprocess.run(
pip_cmd,
capture_output=True,
text=True,def _send_prompt_cli(self, acpx: str, prompt: str) -> str:
"""Send prompt as a CLI argument (original path)."""
try:
result = subprocess.run(
[acpx, "--approve-all", "--ttl", "0", "--cwd", self._abs_cwd(),
self.config.agent, "-s", self.config.session_name,
prompt],)
try:
result = subprocess.run(
[acpx, "--approve-all", "--ttl", "0", "--cwd", self._abs_cwd(),
self.config.agent, "-s", self.config.session_name,
short_prompt],t0 = time.monotonic()
try:
result = subprocess.run(
cmd,
cwd=str(workspace),
capture_output=True,entire compilation pipeline — bibtex never runs, all citations [?].
"""
try:
proc = subprocess.run(
["pdflatex", "-interaction=nonstopmode", tex_name],
cwd=work_dir,
capture_output=True,logger.warning("bibtex not found on PATH — citations will be [?]")
return False
try:
proc = subprocess.run(
["bibtex", stem],
cwd=work_dir,
capture_output=True,print(f" Running in subprocess (timeout={timeout_sec}s)...")
try:
proc = subprocess.run(
[sys.executable, str(main_py)],
cwd=str(code_dir),
capture_output=True,VirusTotal engine telemetry is currently stale for this artifact.
Detected: suspicious.dynamic_code_execution, suspicious.exposed_secret_literal