Skills python-executor
📦
python-executor
Content revision r1 High Risk ⚙️ External commands🌐 Network access
Run Python Tasks in a Remote Sandbox
Many AI workflows need short Python jobs without local setup. This skill runs Python through inference.sh with common analysis, scraping, media, and document libraries.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "python-executor" from https://skillstore.io/skills/inference-sh-skills-python-executor.md and its manifest at https://skillstore.io/api/skills/inference-sh-skills-python-executor/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "python-executor". Analyze a two-column sales table and create a bar chart.
Expected outcome:
Printed summary with total sales, average sale, and top seller. Returned chart image saved as chart.png.
Using "python-executor". Resize a batch of product images and export compressed copies.
Expected outcome:
Returned resized image files and a short log listing dimensions and filenames.
Using "python-executor". Fetch an approved API endpoint and make a CSV report.
Expected outcome:
Returned CSV file plus a concise summary of records fetched and fields extracted.
Security Audit
High Riskv4 • 7/5/2026 Open versioned report
Most static shell findings are Markdown backticks or examples, but the skill intentionally routes code through the external belt CLI and inference.sh. Confirmed risks include remote arbitrary Python execution, outbound network examples, mutable install dependencies, and automatic returned output files; no prompt injection text was found.
1
Files scanned
188
Lines analyzed
16
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Arbitrary Python Execution Through External Service
The skill permits belt commands and shows users how to submit arbitrary Python code to infsh/python-executor. Even with sandboxing, this sends code and inputs to a third-party execution service.
The allowed-tools declaration and quick start show the execution path, and the use-case list says automation can run any Python script.
Medium
Automatic Output Return Can Expose Data
The skill states that files saved under outputs are automatically returned. If user code writes private data there, the response can expose those files outside the intended workflow.
The file output section explicitly describes automatic return of saved artifacts and lists examples of generated files.
Capability review items (16)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
This line instructs users to run npx to install an external CLI skill. It is not auto-executed, but it introduces a supply-chain and external command risk.
Medium
Ruby/shell backtick execution
```bash
This bash example invokes belt app run to send Python code to infsh/python-executor. The command is intentional, but it is real external execution of user-provided code through a remote CLI.
Medium
Ruby/shell backtick execution
```bash
This bash example invokes belt app run to send Python code to infsh/python-executor. The command is intentional, but it is real external execution of user-provided code through a remote CLI.
Medium
Ruby/shell backtick execution
```bash
This bash example invokes belt app run to send Python code to infsh/python-executor. The command is intentional, but it is real external execution of user-provided code through a remote CLI.
Medium
Ruby/shell backtick execution
```bash
This bash example invokes belt app run to send Python code to infsh/python-executor. The command is intentional, but it is real external execution of user-provided code through a remote CLI.
Medium
Ruby/shell backtick execution
```bash
This bash example invokes belt app run to send Python code to infsh/python-executor. The command is intentional, but it is real external execution of user-provided code through a remote CLI.
Medium
Ruby/shell backtick execution
```bash
This bash example invokes belt app run to send Python code to infsh/python-executor. The command is intentional, but it is real external execution of user-provided code through a remote CLI.
Medium
Ruby/shell backtick execution
```bash
This bash example invokes belt app run to send Python code to infsh/python-executor. The command is intentional, but it is real external execution of user-provided code through a remote CLI.
Medium
Ruby/shell backtick execution
```bash
This bash example invokes belt app run to send Python code to infsh/python-executor. The command is intentional, but it is real external execution of user-provided code through a remote CLI.
Medium
Ruby/shell backtick execution
```bash
The related-skills block gives npx installation commands for additional remote skills. These commands are user-invoked, but they still expand the external command and supply-chain surface.
Low
Python HTTP libraries
"code": "import requests\nfrom bs4 import BeautifulSoup\n\nresponse = requests.get(\"https://example
The web scraping example runs Python requests against https://example.com through the executor. This confirms outbound network capability in submitted code.
Low
Python HTTP libraries
"code": "import requests\nimport json\n\nresponse = requests.get(\"https://api.github.com/users/octo
The API example runs Python requests against the GitHub API through the executor. This confirms outbound network capability in submitted code.
Low
Hardcoded URL
description: "Execute Python code in a safe sandboxed environment via [inference.sh](https://inferen
The description states that execution happens via inference.sh, which is an external service boundary. User code and inputs may be sent to that service when the skill is used.
Low
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The install guidance links to a raw GitHub-hosted instruction file. It is user-driven rather than automatic, but mutable external setup instructions create a low supply-chain risk.
Low
Hardcoded URL
"code": "import requests\nfrom bs4 import BeautifulSoup\n\nresponse = requests.get(\"https://example
The web scraping example runs Python requests against https://example.com through the executor. This confirms outbound network capability in submitted code.
Low
Hardcoded URL
"code": "import requests\nimport json\n\nresponse = requests.get(\"https://api.github.com/users/octo
The API example runs Python requests against the GitHub API through the executor. This confirms outbound network capability in submitted code.
Risk Factors
⚙️ External commands (41)
SKILL.md:7 SKILL.md:17 SKILL.md:19-26 SKILL.md:26-33 SKILL.md:33-40 SKILL.md:40-47 SKILL.md:47-52 SKILL.md:52 SKILL.md:53 SKILL.md:54 SKILL.md:55-58 SKILL.md:58 SKILL.md:59 SKILL.md:62 SKILL.md:63 SKILL.md:66-67 SKILL.md:67 SKILL.md:68-71 SKILL.md:71 SKILL.md:72 SKILL.md:75 SKILL.md:76 SKILL.md:82-86 SKILL.md:86-90 SKILL.md:90-94 SKILL.md:94-98 SKILL.md:98-102 SKILL.md:102-106 SKILL.md:106-111 SKILL.md:111-115 SKILL.md:115-119 SKILL.md:119-123 SKILL.md:123-127 SKILL.md:127-131 SKILL.md:131-133 SKILL.md:133-139 SKILL.md:139-143 SKILL.md:143-149 SKILL.md:149-166 SKILL.md:166 SKILL.md:171-180
🌐 Network access (10)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/inference-sh-skills-python-executor/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/inference-sh-skills-python-executor?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/inference-sh-skills-python-executor?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-sh-skills-python-executor/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/inference-sh-skills-python-executor.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
inference-sh-skills. (2026). python-executor security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-sh-skills-python-executor/audits/4BibTeX citation
@techreport{inference-sh-skills-inference-sh-skills-python-executor-2026,
author = {inference-sh-skills},
title = {python-executor security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/inference-sh-skills-python-executor/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "python-executor security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "inference-sh-skills"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/inference-sh-skills-python-executor/audits/4"
identifiers:
- type: other
value: "skillstore:inference-sh-skills-python-executor:audit:4"
description: "Skillstore immutable audit report identifier"
Compare variants
10 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Higher Skillstore usage
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
infsh-skills Recommended
infsh-skills-python-executor
Skillstore Score 50
Evidence Confidence High
Skillstore usage 10
Updated
2026-08-21
inferen-sh-python-executor
Skillstore Score 50
Evidence Confidence High
Skillstore usage 9
Updated
2026-08-21
101-skills-python-executor
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 4
Updated
2026-08-21
qu-skills-python-executor
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 24
Updated
2026-08-21
skillssh-python-executor
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 14
Updated
2026-08-21
inference-sh-python-executor
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 13
Updated
2026-08-21
inference-skills-python-executor
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated
2026-08-21
inference-sh-9-python-executor
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated
2026-08-21
inference-sh-skills Current
inference-sh-skills-python-executor
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated
2026-08-21
halt-catch-fire-python-executor
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance
What You Can Build
Analyze data tables
Process CSV or pasted data, calculate summaries, and return charts or transformed files.
Automate approved web tasks
Fetch approved pages or APIs, extract structured information, and save results as files.
Generate media and documents
Create images, videos, PDFs, and 3D assets from short Python scripts.
Try These Prompts
Run a small calculation
Use python-executor to run a short Python script that summarizes this data: [paste data]. Return the printed result and any output files.
Create a chart
Use python-executor to build a chart from this table: [table]. Save the chart to outputs/chart.png and summarize the result.
Scrape an approved page
Use python-executor to fetch [approved URL], extract [fields], and save a CSV in outputs. Use a timeout of [seconds].
Build a processing pipeline
Use python-executor to process [input files], call [approved API], generate [report type], and return all files saved in outputs.
Best Practices
- Review generated Python before execution, especially network requests and file output paths.
- Keep secrets out of prompts and code sent to remote execution.
- Set practical timeouts and save intentional artifacts under outputs.
Avoid
- Running unreviewed code from unknown sources.
- Sending private data, API keys, or credentials to the executor.
- Using the skill for long-running, interactive, GPU, or production workloads.
Frequently Asked Questions
Does this run Python locally?
No. It sends jobs through the inference.sh belt CLI to a remote sandboxed executor.
What libraries are available?
The skill lists common libraries for data, HTTP, scraping, browser automation, images, video, PDFs, and 3D processing.
Can it access the internet?
Yes, submitted Python can use HTTP libraries when the code makes network requests. Approve target domains before running it.
How are generated files returned?
Files saved under outputs are detected and returned with the execution response.
Should I send secrets to this skill?
No. Do not include API keys, credentials, private data, or regulated data in remote execution jobs.
Does it support interactive plots?
No. Scripts should save plots and other artifacts to files instead of opening interactive windows.
Developer Details
Author
inference-sh-skillsLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
a25199bc7d6b82598536822d1738eb5d5f54025b
Maintenance freshness
7/18/2026
Usage
2 downloads · 59 views
File structure
📄 SKILL.md