Skills python-executor

📦

python-executor

Name: python-executor
Author: 101-skills

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access

Run Python Workloads in a Remote Sandbox

Complex Python tasks often require libraries and an isolated runtime. This skill submits code to inference.sh and returns console output or generated files.

Supports: Claude Codex Code(CC)

⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "python-executor" from https://skillstore.io/skills/101-skills-python-executor.md and its manifest at https://skillstore.io/api/skills/101-skills-python-executor/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/101-skills-python-executor.md Signed manifest GET /api/skills/101-skills-python-executor/manifest Signed lockfile GET /api/skills/101-skills-python-executor/lockfile

Test it

Using "python-executor". Analyze monthly sales by region and create a chart.

Expected outcome:

Console summary: West had the highest total sales, followed by North.
Returned file: regional-sales.png
Returned file: regional-sales-summary.csv

Using "python-executor". Create a grayscale gradient image.

Expected outcome:

The execution completed successfully and returned gradient.png from the outputs directory.

Using "python-executor". Inspect a 3D sphere model and report its size.

Expected outcome:

The result reports vertex and face counts, bounding dimensions, and a returned sphere.stl file.

Security Audit

Medium Risk

v5 • 7/12/2026 Open versioned report

The skill intentionally invokes the belt CLI, submits arbitrary Python to a third-party execution service, and demonstrates outbound HTTP requests. Most backtick detections are Markdown formatting, and the reconnaissance alert is unsupported, but remote execution, network access, and unpinned npx installation remain real risks.

Files scanned

188

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:3 SKILL.md:22-25

Third-Party Code Submission Boundary

The skill sends Python source through the inference.sh belt application. Submitted source may contain user data or secrets that cross a third-party service boundary.

The description names inference.sh, and the quick start submits Python source with belt app run. The document does not state a local-only execution path.

Capability review items (15)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:7

Ruby/shell backtick execution

> **Install the belt CLI skill:** `npx skills add belt-sh/cli`

Line 7 instructs users to execute an npx package installer, which runs third-party code and creates a supply-chain risk.

Medium

SKILL.md:19-26

Ruby/shell backtick execution

```bash

The fenced shell example runs belt login and belt app run, so external command execution is an intended capability.

Medium

SKILL.md:82-86

Ruby/shell backtick execution

```bash

The fenced example invokes belt app run to execute supplied Python through an external application.

Medium

SKILL.md:90-94

Ruby/shell backtick execution

```bash

The fenced example invokes belt app run with generated analysis code, confirming external command execution.

Medium

SKILL.md:98-102

Ruby/shell backtick execution

```bash

The fenced example calls belt app run to execute image-processing code through an external service.

Medium

SKILL.md:106-111

Ruby/shell backtick execution

```bash

The example executes belt app run with Python video-generation code, which is an external command.

Medium

SKILL.md:115-119

Ruby/shell backtick execution

```bash

The sample invokes belt app run to execute 3D-processing Python in an external environment.

Medium

SKILL.md:123-127

Ruby/shell backtick execution

```bash

The sample runs belt app run and submits Python that makes an external API request.

Medium

SKILL.md:143-149

Ruby/shell backtick execution

```bash

The shell sample invokes belt app run for both default and high-memory remote variants.

Medium

SKILL.md:171-180

Ruby/shell backtick execution

```bash

The fenced examples execute three npx installation commands, which run packages from an external registry.

Low

SKILL.md:84

Python HTTP libraries

"code": "import requests\nfrom bs4 import BeautifulSoup\n\nresponse = requests.get(\"https://example

The Python sample imports requests and performs an outbound GET request to example.com.

Low

SKILL.md:125

Python HTTP libraries

"code": "import requests\nimport json\n\nresponse = requests.get(\"https://api.github.com/users/octo

The Python sample uses requests to call the public GitHub API.

Low

SKILL.md:13

Hardcoded URL

![Python Code Executor](https://cloud.inference.sh/u/33sqbmzt3mrg2xxphnhw5g5ear/01k8d8b4mckh6z89dhtx

The remote image URL may be fetched when the skill documentation is rendered, creating an external request and tracking surface.

Low

SKILL.md:84

Hardcoded URL

"code": "import requests\nfrom bs4 import BeautifulSoup\n\nresponse = requests.get(\"https://example

The URL is passed directly to requests.get in executable example code, producing an outbound network request.

Low

SKILL.md:125

Hardcoded URL

"code": "import requests\nimport json\n\nresponse = requests.get(\"https://api.github.com/users/octo

The hardcoded GitHub API URL is passed to requests.get and is actively contacted by the example.

Risk Factors

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/101-skills-python-executor/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/101-skills-python-executor/security.svg)](https://skillstore.io/skills/101-skills-python-executor?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/101-skills-python-executor?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/101-skills-python-executor/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/101-skills-python-executor.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

101-skills. (2026). python-executor security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/101-skills-python-executor/audits/5

BibTeX citation

@techreport{101-skills-101-skills-python-executor-2026,
  author = {101-skills},
  title = {python-executor security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/101-skills-python-executor/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "python-executor security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "101-skills"
date-released: "2026-07-12"
url: "https://skillstore.io/skills/101-skills-python-executor/audits/5"
identifiers:
  - type: other
    value: "skillstore:101-skills-python-executor:audit:5"
    description: "Skillstore immutable audit report identifier"

Compare variants

10 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

inferen-sh Recommended

inferen-sh-python-executor

Skillstore Score 50

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

infsh-skills

infsh-skills-python-executor

Skillstore Score 50

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

101-skills Current

101-skills-python-executor

Skillstore Score 50

Evidence Confidence Medium

Skillstore usage 3

Updated

2026-08-21

qu-skills

qu-skills-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 22

Updated

2026-08-21

skillssh

skillssh-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 12

Updated

2026-08-21

inference-sh

inference-sh-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

inference-skills

inference-skills-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

inference-sh-9

inference-sh-9-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

inference-sh-skills

inference-sh-skills-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 6

Updated

2026-08-21

halt-catch-fire

halt-catch-fire-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 4

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Analyze Operational Data

Clean a dataset, calculate summary metrics, and generate charts without preparing a local Python environment.

Automate Web Research

Request approved public pages, parse selected fields, and return a structured summary.

Generate Technical Assets

Create images, PDF reports, short videos, or 3D model exports from defined inputs.

Try These Prompts

Run a Simple Calculation

Use the Python executor to calculate [calculation]. Show the result and briefly explain the method.

Summarize a Dataset

Analyze [dataset description] with Pandas. Report missing values, key statistics, and notable patterns. Do not include sensitive data.

Create a Downloadable Report

Process [input data] and create a PDF report in the outputs directory. Include [sections] and charts for [metrics].

Build a Controlled Research Pipeline

Request only [approved domains], enforce timeouts and response limits, extract [fields], validate results, and save the final table to outputs.

Best Practices

Remove credentials and sensitive data before submitting code or inputs.
Set the shortest practical timeout and write required artifacts to the outputs directory.
Use approved domains, request timeouts, and response size limits for network tasks.

Avoid

Do not place API keys, tokens, passwords, or private records inside submitted code.
Do not scrape restricted sites or bypass access controls and usage policies.
Do not rely on interactive windows, GPU acceleration, or unlimited execution time.

Frequently Asked Questions

Does this skill run Python locally?

No. It uses the belt CLI to submit code to the inference.sh Python executor.

Which Python version is available?

The documented environment uses Python 3.10.

Can it install additional packages?

The skill documents more than 100 pre-installed libraries but does not document runtime package installation.

How are generated files returned?

Files written to the outputs directory are detected and included in the execution response.

Can it access websites and APIs?

Yes. Included HTTP libraries can make network requests, subject to service controls and target policies.

Is sensitive data safe to submit?

Treat execution as third-party processing. Remove secrets and confidential data unless service terms and organizational policies permit submission.

Developer Details

Author

101-skills

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/101-skills/skills/tree/main/tools/utilities/python-executor/

Ref

d71c7417a35d5c2624161bd2fe8de8a41a362128

Maintenance freshness

7/18/2026

Usage

2 downloads · 0 views

File structure

📄 SKILL.md