Skip to main content

untrusted-execution

Estrellas12
Forks5
Actualizado22 de junio de 2026 a las 15:06

Security playbook for running third-party / untrusted code (research-paper repos, user-supplied scripts) inside DaxAlgo Terminal. Deny-by-default sandbox (Docker / WSL2 / VM), egress allowlist, CPU/RAM/pids/disk/wall-clock quotas, no host mounts of the canonical store or credentials, kill-the-process-tree, never exec in-process. Use whenever editing src/TradingTerminal.Infrastructure/Research/Sandbox/, ISandboxRunner, SandboxPolicy/SandboxQuota, the Paper Lab repro engine, or designing ANY feature that executes code the user did not write. This is a security subsystem, not a feature — read it before weakening any isolation.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

SKILL.md
readonly