ai-ml-attacks
This skill should be used when the user asks about "AI security", "ML pipeline attacks", "prompt injection", "model…
@allsmogInstall SkillSecurity
Skill
/sandbox-escapes
This skill should be used when the user asks about "sandbox escape", "vm escape", "template injection to RCE", "SSTI exploitation", "vm2 bypass", "restricted execution bypass", "sandbox breakout", or needs to identify sandbox escape and template engine exploitation techniques
Claude Code
$ npx -y skills add allsmog/vuln-scout --skill sandbox-escapes --agent claude-code
Codex
$ npx skills add allsmog/vuln-scout --skill sandbox-escapes -a codex -y
Cursor
$ npx skills add allsmog/vuln-scout --skill sandbox-escapes -a cursor -y
Gemini CLI
$ npx skills add allsmog/vuln-scout --skill sandbox-escapes -a gemini-cli -y
GitHub Copilot
$ npx skills add allsmog/vuln-scout --skill sandbox-escapes -a github-copilot -y
OpenCode
$ npx skills add allsmog/vuln-scout --skill sandbox-escapes -a opencode -y
Windsurf
$ npx skills add allsmog/vuln-scout --skill sandbox-escapes -a windsurf -y
SKILL.md
sandbox-escapes.SKILL.mdname: Sandbox Escapes description: This skill should be used when the user asks about "sandbox escape", "vm escape", "template injection to RCE", "SSTI exploitation", "vm2 bypass", "restricted execution bypass", "sandbox breakout", or needs to identify sandbox escape and template engine exploitation techniques during whitebox security review. version: 1.0.0
Sandbox Escape Techniques
Techniques for escaping restricted execution environments and exploiting template engines across Node.js, Python, and Ruby.
When to Use
Activate this skill during:
- Code review where `vm`, `eval`, or template engines process user input
- Identifying SSTI-to-RCE exploitation paths
- Analyzing restricted execution environments (vm2, RestrictedPython, $SAFE)
- Building exploit chains that leverage sandbox escapes
Language-Specific References
- **Node.js**: `nodejs-sandbox-escape.md` -- vm module bypass, vm2 CVEs, EJS/Pug injection, prototype pollution to RCE
- **Python**: `python-sandbox-escape.md` -- Jinja2 SSTI, Mako exploitation, serialization attacks, RestrictedPython bypass
- **Ruby**: `ruby-sandbox-escape.md` -- ERB injection, Slim/Haml exploitation, $SAFE bypasses, Marshal deserialization
Ships withvuln-scout
AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 autonomous agents. STRIDE threat modeling, OWASP 2025 coverage, polyglot monorepo support.
2635 skills9 agents
Stars on GitHub
Momentum
- stars in total
- 26
Other skills on vuln-scout.
@allsmogInstall Skillbusiness-logic
This skill should be used when the user asks about "business logic", "workflow vulnerability", "trust boundary", "state machine",…
@allsmogInstall Skillcache-poisoning
This skill should be used when the user asks about "cache poisoning", "web cache deception", "CDN cache", "proxy cache", "nginx…
@allsmogInstall Skillcloud-native
This skill should be used when the user asks about "cloud security", "AWS security", "GCP security", "Azure security",…
@allsmogInstall Skillcompliance-mapping
This skill should be used when the user asks about "compliance mapping", "PCI-DSS", "HIPAA", "SOC 2", "NIST CSF", "regulatory…
@allsmogInstall Skillcpg-analysis
This skill should be used when the user asks about "Code Property Graph", "CPG analysis", "Joern queries", "CPGQL", "data flow…
@allsmogInstall SkillMore skills from other plugins.
api-security
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
@zhaoxuya520Install Skillabusing-dpapi-for-cred…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
@mukul975Install Skillclean-user-facing-text
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…
@guillaumemeyerInstall Skill
Questions about sandbox-escapes.
- Which coding agents can use sandbox-escapes?
- sandbox-escapes installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.