Skills python-executor

📦

python-executor

Name: python-executor
Author: inference-skills

Content revision r1 High Risk ⚙️ External commands🌐 Network access

Run Python Tasks in a Remote Sandbox

Running Python from an AI assistant can require setup, libraries, and safe output handling. This skill routes Claude, Codex, and Claude Code prompts to an inference.sh Python executor with common data, media, and web libraries.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "python-executor" from https://skillstore.io/skills/inference-skills-python-executor.md and its manifest at https://skillstore.io/api/skills/inference-skills-python-executor/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inference-skills-python-executor.md Signed manifest GET /api/skills/inference-skills-python-executor/manifest Signed lockfile GET /api/skills/inference-skills-python-executor/lockfile

Test it

Using "python-executor". Analyze a small sales table and create a chart.

Expected outcome:

A short written summary of total and average sales.
A chart file saved in the outputs directory.
A note listing the main libraries used.

Using "python-executor". Create a simple gradient image.

Expected outcome:

A generated image file returned from the outputs directory.
A concise message confirming image dimensions and format.

Using "python-executor". Fetch public profile data from an approved API.

Expected outcome:

A readable summary of selected fields.
A reminder that outbound requests were made to the approved endpoint.

Security Audit

High Risk

v4 • 7/5/2026 Open versioned report

Most Markdown backtick findings are false positives from code fences, package names, or inline examples. The confirmed risks are documented belt commands that submit arbitrary Python to a remote executor, outbound HTTP examples, and related skill installation commands. No prompt injection text was found, but the safety claim is not verifiable from this skill file.

Files scanned

186

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

High

SKILL.md:4 SKILL.md:21-23 SKILL.md:158

Remote Arbitrary Python Execution Capability

The skill authorizes belt CLI use and instructs users to submit Python code to infsh/python-executor. This can execute broad automation and network-capable scripts through an external service.

The allowed-tools entry permits belt commands, and examples send arbitrary code to a named executor. The use case list explicitly says it can run any Python script.

Medium

SKILL.md:9 SKILL.md:162-164

Unverified Sandbox Safety Claim

The documentation says execution is safe and isolated, but the skill file contains no implementation or policy details to verify the sandbox boundary. Users must trust the remote service and CLI behavior.

The safety claim is explicit, while the repository shard only provides documentation. No implementation evidence is present in the scanned file.

Capability review items (13)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:17-24

Ruby/shell backtick execution

```bash

The location covers a bash quick-start block that runs belt login and belt app run against infsh/python-executor. It is a real external command path for submitting Python code to a remote executor.

Medium

SKILL.md:80-84

Ruby/shell backtick execution

```bash

The bash example invokes belt app run and submits Python that fetches a website. This is real external command execution with outbound network behavior.

Medium

SKILL.md:88-92

Ruby/shell backtick execution

```bash

The bash example invokes belt app run to execute a data analysis script remotely. The command is hardcoded, but it still executes user-supplied Python through an external CLI.

Medium

SKILL.md:96-100

Ruby/shell backtick execution

```bash

The bash example invokes belt app run to execute image-processing code in the remote executor. This confirms external command use, though the sample input is benign.

Medium

SKILL.md:104-109

Ruby/shell backtick execution

```bash

The bash example invokes belt app run with media-generation code and an extended timeout. This is legitimate documented functionality but still a real external command execution path.

Medium

SKILL.md:113-117

Ruby/shell backtick execution

```bash

The bash example invokes belt app run to execute 3D processing code remotely. This is a confirmed external command capability rather than a Markdown-only artifact.

Medium

SKILL.md:121-125

Ruby/shell backtick execution

```bash

The bash example invokes belt app run and submits Python that calls the GitHub API. It combines external command execution with outbound HTTP behavior.

Medium

SKILL.md:141-147

Ruby/shell backtick execution

```bash

The variants section shows belt app run commands, including a high-memory remote executor variant. This is real documented external command usage.

Medium

SKILL.md:169-178

Ruby/shell backtick execution

```bash

The related skills section shows npx skills add commands that install additional skills. Installation commands can alter the local tool environment and require user approval.

Low

SKILL.md:82

Python HTTP libraries

"code": "import requests\nfrom bs4 import BeautifulSoup\n\nresponse = requests.get(\"https://example

The example imports requests and fetches https://example.com inside code submitted to the executor. This confirms network-capable Python execution, though the target is benign.

Low

SKILL.md:123

Python HTTP libraries

"code": "import requests\nimport json\n\nresponse = requests.get(\"https://api.github.com/users/octo

The example imports requests and calls the GitHub API from executor code. This is an intended outbound HTTP capability and should be disclosed.

Low

SKILL.md:82

Hardcoded URL

"code": "import requests\nfrom bs4 import BeautifulSoup\n\nresponse = requests.get(\"https://example

The hardcoded URL is used inside a requests.get call in the scraping example. It demonstrates outbound network access from submitted Python code.

Low

SKILL.md:123

Hardcoded URL

"code": "import requests\nimport json\n\nresponse = requests.get(\"https://api.github.com/users/octo

The hardcoded GitHub API URL is used inside a requests.get call. It demonstrates outbound API access from the executor.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/inference-skills-python-executor/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-skills-python-executor/security.svg)](https://skillstore.io/skills/inference-skills-python-executor?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inference-skills-python-executor?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-skills-python-executor/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inference-skills-python-executor.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

inference-skills. (2026). python-executor security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-skills-python-executor/audits/4

BibTeX citation

@techreport{inference-skills-inference-skills-python-executor-2026,
  author = {inference-skills},
  title = {python-executor security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/inference-skills-python-executor/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "python-executor security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "inference-skills"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/inference-skills-python-executor/audits/4"
identifiers:
  - type: other
    value: "skillstore:inference-skills-python-executor:audit:4"
    description: "Skillstore immutable audit report identifier"

Compare variants

10 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

inferen-sh Recommended

inferen-sh-python-executor

Skillstore Score 50

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

infsh-skills

infsh-skills-python-executor

Skillstore Score 50

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

101-skills

101-skills-python-executor

Skillstore Score 50

Evidence Confidence Medium

Skillstore usage 3

Updated

2026-08-21

qu-skills

qu-skills-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 22

Updated

2026-08-21

skillssh

skillssh-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 12

Updated

2026-08-21

inference-sh

inference-sh-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

inference-skills Current

inference-skills-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

inference-sh-9

inference-sh-9-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

inference-sh-skills

inference-sh-skills-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 6

Updated

2026-08-21

halt-catch-fire

halt-catch-fire-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 4

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Analyze Small Datasets

Process CSV-style data, calculate summary metrics, and save charts without local Python setup.

Create Media Assets

Generate images, short videos, PDFs, or 3D files using pre-installed Python libraries.

Prototype Automation Scripts

Run short Python scripts for API calls, file transformations, and repeatable utility tasks.

Try These Prompts

Run a Simple Calculation

Use python-executor to run a short Python calculation. Print the result and explain what ran.

Summarize a Dataset

Use python-executor to analyze this table. Return summary statistics and save one chart in the outputs directory.

Transform an Image

Use python-executor to resize and annotate the provided image. Save the processed image in the outputs directory.

Build a Multi-Step Automation

Use python-executor to fetch approved API data, transform it with pandas, save a report, and summarize the output files.

Best Practices

Review code before execution, especially when it reads files or makes network requests.
Save required artifacts in the outputs directory so they are returned reliably.
Use short timeouts first, then increase limits only for heavier jobs.

Avoid

Do not submit secrets, tokens, or private files unless the external executor is approved for them.
Do not run untrusted scraped code or commands copied from unknown sources.
Do not use this skill for GPU workloads or long-running services.

Frequently Asked Questions

Does this run Python locally?

No. The skill uses the inference.sh belt CLI to run code in an external executor.

Which AI tools can use it?

The report lists Claude, Codex, and Claude Code as supported tools.

Can it make network requests?

Yes. The examples include requests-based web scraping and API calls.

Where should generated files be saved?

Save files in the outputs directory so the executor can return them.

Does it support GPU workloads?

No. The documented environment is CPU-only.

What should I check before using it?

Confirm that the code, inputs, and network endpoints are approved for an external execution service.

Developer Details

Author

inference-skills

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/inference-skills/skills/tree/main/tools/utilities/python-executor/

Ref

a25199bc7d6b82598536822d1738eb5d5f54025b

Maintenance freshness

7/18/2026

Usage

3 downloads · 63 views

File structure

📄 SKILL.md

python-executor

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (2)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Analyze Small Datasets

Create Media Assets

Prototype Automation Scripts

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details