Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/bwrap-backend.js:41
- Evidence
const child = spawn(argv[0], argv.slice(1), {
Security audit
Sandcastle
Security checks across malware telemetry and agentic risk
Overview
Sandcastle is a coherent filesystem sandbox plugin, but it needs review because one file-tool path can mutate read-only mapped files despite the documented read-only controls.
Review this before installing if you rely on Sandcastle to enforce read-only host mounts for file tools. Prefer installing only after the rename write-gate issue is fixed or avoid mapping sensitive/user-owned paths as readable until then. Also note that v1 does not isolate network access and auto-downloads bwrap without package signature verification.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dangerous_exec
Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- src/bwrap-backend.ts:60
- Evidence
const child = spawn(argv[0], argv.slice(1), {