Back to plugin

Security audit

MXC Sandbox Execution

Security checks for vulnerabilities and agentic risk

Overview

This Windows sandbox plugin matches its stated purpose and provides explicit controls over command execution, filesystem access, and networking.

This is a prerelease Windows integration. Review host isolation warnings, keep networking disabled unless needed, and grant write access only to intended folders. Follow the documented warning against placing secrets in command arguments or environment values.

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
dist/index.js:1077
Evidence
output = execFileSync(executablePath, ["--probe"], {