Skills python-executor

📦

python-executor

Content revision r2 Medium Risk ⚙️ External commands🌐 Network access

Run Python Tasks in a Remote Sandbox

Local environments may lack libraries or isolation for short Python tasks. This skill submits code to inference.sh and returns console or file outputs.

Supports: Claude Codex Code(CC)

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "python-executor" from https://skillstore.io/skills/infsh-skills-python-executor.md and its manifest at https://skillstore.io/api/skills/infsh-skills-python-executor/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/infsh-skills-python-executor.md Signed manifest GET /api/skills/infsh-skills-python-executor/manifest Signed lockfile GET /api/skills/infsh-skills-python-executor/lockfile

Test it

Using "python-executor". Analyze monthly sales by region and create a chart.

Expected outcome:

Console summary with totals, averages, and missing-value counts.
A regional sales chart returned as outputs/sales_by_region.png.

Using "python-executor". Resize a product image to 800 by 800 pixels.

Expected outcome:

A validated image file returned as outputs/product_800.png with its final dimensions.

Using "python-executor". Extract repository names from a public GitHub API response.

Expected outcome:

A cleaned table returned as outputs/repositories.csv with request status and row count.

Security Audit

Medium Risk

v5 • 8/6/2026 Open versioned report

Most static command findings are Markdown formatting false positives. Real belt and npx commands create external execution and supply-chain exposure, while the workflow sends Python code to inference.sh for remote processing.

1

Files scanned

188

Lines analyzed

13

Review items

0

False positives ignored

Confirmed security concerns (1)

Medium

Remote Code and Data Submission

The workflow authenticates with belt and submits user-provided Python to inference.sh. Code and embedded data leave the local environment for third-party processing.

The quick-start command explicitly logs into belt and sends a code field to infsh/python-executor. The remote processing boundary is clear.

Capability review items (13)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

Ruby/shell backtick execution

> **Install the belt CLI skill:** `npx skills add belt-sh/cli`

Line 7 instructs users to execute an unpinned npx package installer. This creates a real external-command and software supply-chain risk.

Medium

Ruby/shell backtick execution

```bash

The fenced block runs belt login and belt app run, submitting Python code to an external service. These are intentional external commands.

Medium

Ruby/shell backtick execution

```bash

The fenced example invokes belt app run and submits Python that performs an outbound request. This is intentional external command execution.

Medium

Ruby/shell backtick execution

```bash

The fenced example invokes belt app run with user-supplied Python. This sends code to an external executor.

Medium

SKILL.md:98-102

Ruby/shell backtick execution

```bash

The fenced example invokes belt app run to execute image-processing Python remotely. This is real external command execution.

Medium

SKILL.md:106-111

Ruby/shell backtick execution

```bash

The fenced example invokes belt app run to execute video-processing Python remotely. This is real external command execution.

Medium

SKILL.md:115-119

Ruby/shell backtick execution

```bash

The fenced example invokes belt app run to execute 3D-processing Python remotely. This is real external command execution.

Medium

SKILL.md:123-127

Ruby/shell backtick execution

```bash

The fenced example invokes belt app run and submits Python that calls an external API. This is intentional external command execution.

Medium

SKILL.md:143-149

Ruby/shell backtick execution

```bash

The fenced block invokes belt app run with a local input file for both service variants. These are real external commands.

Medium

SKILL.md:171-180

Ruby/shell backtick execution

```bash

The fenced block runs three unpinned npx package installation commands. Executing mutable third-party packages creates a software supply-chain risk.

Low

Python HTTP libraries

"code": "import requests\nfrom bs4 import BeautifulSoup\n\nresponse = requests.get(\"https://example

The submitted Python imports requests and performs an outbound GET to example.com. This demonstrates real network egress from the executor.

Low

Python HTTP libraries

"code": "import requests\nimport json\n\nresponse = requests.get(\"https://api.github.com/users/octo

The submitted Python imports requests and calls the public GitHub API. This demonstrates real network egress from the executor.

Low

Hardcoded URL

![Python Code Executor](https://cloud.inference.sh/u/33sqbmzt3mrg2xxphnhw5g5ear/01k8d8b4mckh6z89dhtx

The Markdown embeds a remotely hosted image, so rendering may contact inference.sh infrastructure and disclose viewer network metadata.

Risk Factors

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Security Assessment

Copy report link

https://skillstore.io/skills/infsh-skills-python-executor/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/infsh-skills-python-executor/security.svg)](https://skillstore.io/skills/infsh-skills-python-executor?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/infsh-skills-python-executor?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/infsh-skills-python-executor/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/infsh-skills-python-executor.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

infsh-skills. (2026). python-executor security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/infsh-skills-python-executor/audits/5

BibTeX citation

@techreport{infsh-skills-infsh-skills-python-executor-2026,
  author = {infsh-skills},
  title = {python-executor security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/infsh-skills-python-executor/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "python-executor security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "infsh-skills"
date-released: "2026-08-06"
url: "https://skillstore.io/skills/infsh-skills-python-executor/audits/5"
identifiers:
  - type: other
    value: "skillstore:infsh-skills-python-executor:audit:5"
    description: "Skillstore immutable audit report identifier"

Compare variants

10 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

infsh-skills Recommended Current

infsh-skills-python-executor

Skillstore Score 50

Evidence Confidence High

Skillstore usage 11

Updated

2026-08-21

inferen-sh-python-executor

Skillstore Score 50

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

101-skills-python-executor

Skillstore Score 50

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

qu-skills-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 25

Updated

2026-08-21

skillssh-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 15

Updated

2026-08-21

inference-sh-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 14

Updated

2026-08-21

inference-skills

inference-skills-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

inference-sh-9-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

inference-sh-skills

inference-sh-skills-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

halt-catch-fire

halt-catch-fire-python-executor

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

55

Architecture

85

Maintainability

87

Content

68

Community

83

Spec Compliance

What You Can Build

Explore Data Quickly

Summarize datasets, calculate statistics, and generate charts without preparing a local Python environment.

Automate Public Web Research

Request public pages or APIs, extract structured fields, and return cleaned files.

Generate Media Assets

Create or transform images, videos, audio, documents, and 3D files with pre-installed libraries.

Try These Prompts

Run a Simple Calculation

Run Python that prints the first ten Fibonacci numbers. Return the console output and explain any execution error.

Analyze a Dataset

Analyze {dataset} with pandas. Summarize missing values and key statistics, then save a chart to outputs/summary.png.

Extract Public Web Data

Fetch {public_url}, extract {fields}, and save clean rows to outputs/results.csv. Respect access rules and report request failures.

Build a Reproducible Media Pipeline

Process {input_asset} with {library}. Validate inputs, limit resources, save files under outputs, and report reproducible execution details.

Best Practices

Review generated Python and destination domains before authorizing remote execution.
Keep secrets, personal data, and regulated information out of submitted code and inputs.
Set realistic timeouts and save every required artifact under the outputs directory.

Avoid

Do not submit credentials, private source code, or confidential datasets.
Do not scrape websites without checking access rules, rate limits, and applicable terms.
Do not expect GPU acceleration, interactive windows, persistent state, or unlimited runtime.

Frequently Asked Questions

Where does the Python code run?

It runs through the infsh/python-executor application on inference.sh, not in the local agent process.

What setup is required?

Install the belt CLI, authenticate with inference.sh, and ensure the remote service is available.

Can it access the internet?

The examples demonstrate outbound HTTP requests. Network policy and destination access depend on the remote service.

How are generated files returned?

Save files under outputs. The executor detects those files and includes them in the response.

Does it support GPU workloads?

No. The documented environment is CPU-only and recommends dedicated applications for GPU or machine-learning workloads.

Can I send sensitive data?

Avoid sensitive data. Code and embedded inputs are processed by a third-party service, so review its policies first.

Developer Details

Author

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Repository

https://github.com/infsh-skills/skills/tree/main/tools/utilities/python-executor/

Ref

4121de961d1b6f2ffca856260e239505c302452c

Maintenance freshness

8/7/2026

Usage

6 downloads · 97 views

File structure

More from infsh-skills

remotion-render

Render React Animations as Videos

Creating polished video from React animation code requires a reliable rendering workflow. This skill sends Remotion TSX to inference.sh and returns a rendered video.

Design & Creative View

ai-avatar-video

Create AI Avatar and Talking Head Videos

Producing presenter videos requires coordinated image, speech, and lip sync tools. This skill builds inference.sh workflows for avatars, localization, and batch content.

Design & Creative View

ai-image-generation

Generate and Edit Images with AI

Choosing and invoking image models can require repeated CLI research. This skill provides model guidance and ready workflows for generation, editing, upscaling, and stitching.

Design & Creative View

web-search

Search and Extract Web Content with Tavily and Exa

Finding current information and extracting useful page content often requires separate tools. This skill provides documented Tavily and Exa workflows through the belt CLI.

Research & Learning View

ai-video-generation

Create AI Videos with Inference Models

Choosing and invoking video models can require extensive platform knowledge. This skill provides model guidance and adaptable belt CLI workflows.

Design & Creative View

twitter-automation

Automate Twitter and X Account Actions

Managing routine X actions across separate tools takes time and creates inconsistent workflows. This skill provides focused CLI commands for publishing, engagement, messaging, and retrieval.

Communication View

python-async-patterns

Build Reliable Async Python

by 0xDarkMatter

Async Python code often fails due to blocking calls, unbounded tasks, and weak cleanup. This skill provides reusable asyncio patterns, examples, and references for robust concurrent services.

Coding & Development View

python-fastapi-patterns

Build FastAPI APIs with Reusable Patterns

by 0xDarkMatter

FastAPI projects need consistent choices for validation, dependencies, middleware, and background work. This skill gives Claude, Codex, and Claude Code reusable patterns for practical Python API development.

Coding & Development View

python-typing-patterns

Add Python Type Safety Patterns

by 0xDarkMatter

Python type annotations can be hard to apply consistently across real projects. This skill gives Claude, Codex, and Claude Code practical patterns for safer typed Python code.

Coding & Development View

building-agents

Build Claude Code Agents

by C0ntr0lledCha0s

Creating reliable AI agents requires clear schemas, safe tools, and repeatable review steps. This skill guides agent design, validation, migration, and maintenance for Claude Code workflows.

Coding & Development View

building-commands

Build Claude Code Slash Commands

by C0ntr0lledCha0s

Teams need repeatable AI workflows that are easy to invoke and review. This skill helps create, update, validate, and document Claude Code slash commands.

Coding & Development View

creating-issues

Create Consistent GitHub Issues

by C0ntr0lledCha0s

Poorly structured issues create ambiguity and require manual cleanup. This skill drafts and validates titles, bodies, labels, milestones, projects, and relationships.

Coding & Development View