Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/index.js:1077
- Evidence
output = execFileSync(executablePath, ["--probe"], {
Security audit
Security checks for vulnerabilities and agentic risk
This Windows sandbox plugin matches its stated purpose and provides explicit controls over command execution, filesystem access, and networking.
This is a prerelease Windows integration. Review host isolation warnings, keep networking disabled unless needed, and grant write access only to intended folders. Follow the documented warning against placing secrets in command arguments or environment values.
SkillSpector was not run because this plugin release contains no bundled skills.
Detected: suspicious.dangerous_exec
output = execFileSync(executablePath, ["--probe"], {