Skills python-executor
📦

python-executor

Content revision r1 Critical ⚙️ External commands🌐 Network access

Run Python Code in a Managed Sandbox

Python tasks often need libraries and isolated execution. This skill runs Python through inference.sh with tools for data, media, scraping, and automation.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "python-executor" from https://skillstore.io/skills/inference-sh-9-python-executor.md and its manifest at https://skillstore.io/api/skills/inference-sh-9-python-executor/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inference-sh-9-python-executor.md Signed manifest GET /api/skills/inference-sh-9-python-executor/manifest Signed lockfile GET /api/skills/inference-sh-9-python-executor/lockfile

Test it

Using "python-executor". A request to inspect a small sales dataset and produce a bar chart.

Expected outcome:

Returns column summaries, total sales by person, and a chart file saved for download.

Using "python-executor". A request to resize uploaded images for a product catalog.

Expected outcome:

Returns resized image files, dimensions, and a short processing log.

Using "python-executor". A request to call an approved public API and create a PDF summary.

Expected outcome:

Returns a concise data summary, API status details, and the generated PDF report.

Security Audit

Critical
v4 • 7/6/2026 Open versioned report

The critical pipe-to-shell installer on SKILL.md line 16 is confirmed and should block automatic publication until removed. Most external command alerts are Markdown formatting false positives, while the remaining confirmed issues reflect outbound HTTP examples and third-party Python execution.

1
Files scanned
184
Lines analyzed
6
Review items
0
False positives ignored

Confirmed security concerns (2)

Critical
SKILL.md:16
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh && infsh login
Line 16 pipes a remote installer script directly into sh before running a login command. This creates a supply-chain execution risk because the script is executed before local verification.
High
SKILL.md:3SKILL.md:35-43SKILL.md:157
Third-Party Arbitrary Python Execution
The skill accepts user-provided Python code and sends it to the infsh/python-executor service for execution. This can expose sensitive code, data, or credentials supplied in prompts.
The description, input schema, and use cases show arbitrary Python submitted to a third-party execution app. The risk is intentional functionality, not hidden malware, so confidence is high rather than absolute.
Capability review items (6)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Critical
SKILL.md:16
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh && infsh login
The hardcoded URL on line 16 is downloaded and piped to a shell. That makes the external endpoint part of an executable installation path, not a passive documentation link.
Low
SKILL.md:81
Python HTTP libraries
"code": "import requests\nfrom bs4 import BeautifulSoup\n\nresponse = requests.get(\"https://example
The example Python code performs outbound HTTP requests for scraping or API access. The endpoints are public examples, but the skill clearly supports external network activity.
Low
SKILL.md:122
Python HTTP libraries
"code": "import requests\nimport json\n\nresponse = requests.get(\"https://api.github.com/users/octo
The example Python code performs outbound HTTP requests for scraping or API access. The endpoints are public examples, but the skill clearly supports external network activity.
Low
SKILL.md:3
Hardcoded URL
description: "Execute Python code in a safe sandboxed environment via [inference.sh](https://inferen
The description identifies inference.sh as the external execution service for this skill. This is an expected dependency, but it confirms a third-party network boundary for user code.
Low
SKILL.md:81
Hardcoded URL
"code": "import requests\nfrom bs4 import BeautifulSoup\n\nresponse = requests.get(\"https://example
The example Python code performs outbound HTTP requests for scraping or API access. The endpoints are public examples, but the skill clearly supports external network activity.
Low
SKILL.md:122
Hardcoded URL
"code": "import requests\nimport json\n\nresponse = requests.get(\"https://api.github.com/users/octo
The example Python code performs outbound HTTP requests for scraping or API access. The endpoints are public examples, but the skill clearly supports external network activity.

Risk Factors

⚙️ External commands (40)
SKILL.md:15-22 SKILL.md:22-24 SKILL.md:24-30 SKILL.md:30-37 SKILL.md:37-44 SKILL.md:44-49 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52-55 SKILL.md:55 SKILL.md:56 SKILL.md:59 SKILL.md:60 SKILL.md:63-64 SKILL.md:64 SKILL.md:65-68 SKILL.md:68 SKILL.md:69 SKILL.md:72 SKILL.md:73 SKILL.md:79-83 SKILL.md:83-87 SKILL.md:87-91 SKILL.md:91-95 SKILL.md:95-99 SKILL.md:99-103 SKILL.md:103-108 SKILL.md:108-112 SKILL.md:112-116 SKILL.md:116-120 SKILL.md:120-124 SKILL.md:124-128 SKILL.md:128-130 SKILL.md:130-136 SKILL.md:136-140 SKILL.md:140-146 SKILL.md:146-163 SKILL.md:163 SKILL.md:168-177
🌐 Network access (11)
SKILL.md:81 SKILL.md:122 SKILL.md:3 SKILL.md:11 SKILL.md:16 SKILL.md:24 SKILL.md:81 SKILL.md:122 SKILL.md:181 SKILL.md:182 SKILL.md:183

Detected Patterns

Pipe to shell pattern
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/inference-sh-9-python-executor/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-sh-9-python-executor/security.svg)](https://skillstore.io/skills/inference-sh-9-python-executor?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inference-sh-9-python-executor?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-sh-9-python-executor/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inference-sh-9-python-executor.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

inference-sh-9. (2026). python-executor security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-sh-9-python-executor/audits/4

BibTeX citation

@techreport{inference-sh-9-inference-sh-9-python-executor-2026, author = {inference-sh-9}, title = {python-executor security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/inference-sh-9-python-executor/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "python-executor security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "inference-sh-9" date-released: "2026-07-06" url: "https://skillstore.io/skills/inference-sh-9-python-executor/audits/4" identifiers: - type: other value: "skillstore:inference-sh-9-python-executor:audit:4" description: "Skillstore immutable audit report identifier"

Compare variants

10 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage
inferen-sh Recommended

inferen-sh-python-executor

Skillstore Score 50
Evidence Confidence High
Skillstore usage 9
Updated

2026-08-21

infsh-skills

infsh-skills-python-executor

Skillstore Score 50
Evidence Confidence High
Skillstore usage 8
Updated

2026-08-21

101-skills

101-skills-python-executor

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 3
Updated

2026-08-21

qu-skills

qu-skills-python-executor

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 22
Updated

2026-08-21

skillssh

skillssh-python-executor

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 12
Updated

2026-08-21

inference-sh

inference-sh-python-executor

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 11
Updated

2026-08-21

inference-skills

inference-skills-python-executor

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

inference-sh-9 Current

inference-sh-9-python-executor

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

inference-sh-skills

inference-sh-skills-python-executor

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated

2026-08-21

halt-catch-fire

halt-catch-fire-python-executor

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 4
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Analyze Business Data

Load datasets, compute summaries, and generate charts or exported files for review.

Automate Python Workflows

Run repeatable scripts for API checks, file conversion, and small automation jobs.

Create Media and Documents

Generate images, videos, PDFs, and 3D assets using pre-installed Python libraries.

Try These Prompts

Run a Simple Script 
Run a Python script that prints the current pandas version. Use the default timeout and capture the result.
Analyze a Dataset 
Use Python to inspect the uploaded sales data, summarize the columns, and create a chart saved in the outputs directory.
Process Media Files 
Use Python libraries to resize the provided images, create thumbnails, and return the processed files with a short summary.
Build a Multi-Step Automation 
Run a Python workflow that fetches approved API data, validates the response, creates a report, and returns generated files.

Best Practices

  • Review Python code for secrets, file paths, and external requests before execution.
  • Set the shortest practical timeout and choose high memory only for large workloads.
  • Save artifacts in the outputs directory so they are returned reliably.

Avoid

  • Do not pipe remote install scripts directly into a shell.
  • Do not send private keys, tokens, customer data, or regulated data to the executor.
  • Do not use the skill for stealth scraping, abuse, or unauthorized network access.

Frequently Asked Questions

Does this run code locally?
No. The skill runs Python through the inference.sh app, not directly inside the agent workspace.
Which tools are required?
It uses the infsh CLI and the configured Bash permission for infsh commands.
Can it access the internet?
Examples show HTTP requests for web scraping and APIs. Treat all outbound requests as external network activity.
How do I get generated files?
Save files in the outputs directory. The skill documentation says these files are automatically returned.
Can it use GPU libraries?
No. The documented environment is CPU-only and directs AI workloads to dedicated apps.
Is it safe for secrets?
No. Avoid secrets or sensitive data because code and inputs may be processed by an external execution service.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/inference-sh-9/skills/tree/main/skills/python-executor/

Ref

a06681402992ceae98ba04d54cfd4ab004862696

Maintenance freshness

7/18/2026

Usage

4 downloads · 171 views

File structure

📄 SKILL.md