untrusted-execution
星标12
分支5
更新时间2026年6月22日 15:06
Security playbook for running third-party / untrusted code (research-paper repos, user-supplied scripts) inside DaxAlgo Terminal. Deny-by-default sandbox (Docker / WSL2 / VM), egress allowlist, CPU/RAM/pids/disk/wall-clock quotas, no host mounts of the canonical store or credentials, kill-the-process-tree, never exec in-process. Use whenever editing src/TradingTerminal.Infrastructure/Research/Sandbox/, ISandboxRunner, SandboxPolicy/SandboxQuota, the Paper Lab repro engine, or designing ANY feature that executes code the user did not write. This is a security subsystem, not a feature — read it before weakening any isolation.
安装
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
SKILL.md
readonly