AgentStack
Sign in Publish
MCP servers Skills Toolkits Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Sandbox Source Intake

skill-arnie016-codex-prompt-templates-sandbox-source-intake · by Arnie016

>

↗ Website ↗ Repository
— No reviews yet
0 installs
2 views
0.0% view→install

Install

$ agentstack add skill-arnie016-codex-prompt-templates-sandbox-source-intake

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ● Network access Used
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Sandbox Source Intake? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Sandbox Source Intake

Use this before trusting a fresh repo.

Clone Policy

  • Use shallow clones: git clone --depth 1 sources/.
  • Prefer a small curated set over bulk cloning.
  • Check du -sh sources after each batch.
  • Skip or sparse-clone very large repos unless needed.

Inspection Order

  1. README and license.
  2. Manifests: package.json, pyproject.toml, Cargo.toml, go.mod.
  3. Install scripts, Dockerfiles, GitHub Actions.
  4. Tool/MCP configs and permissions.
  5. Source entry points.

Red Flags

  • raw executable zip/binary download as primary install
  • curl-piped shell
  • postinstall scripts that fetch remote code
  • account/session control without a narrow use case
  • broad filesystem or shell tools exposed through MCP
  • unclear license

Output

# Source Intake Report
Repo:
Local path:
Disk size:
License:
Runtime:
Install risk:
Useful patterns:
Do not run:
Next action:

Then use $repo-intelligence-brief for safe repos.

Validation

  • Clone depth, disk size, license, runtime, and install risk are recorded.
  • No untrusted install scripts, binaries, package installs, or servers were run.
  • Risky repos are marked inspiration-only until reviewed.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in AI & ML