Powershell Sandbox

在受限 PowerShell 环境中安全执行脚本，支持命令白名单、超时控制、输出限制、文件隔离和执行前安全检查。

Do not install or run this skill as-is. Before trusting it: (1) ask the publisher/source for the actual sandbox implementation (src/sandbox.ps1) and confirm it is present; (2) review the sandbox.ps1 code to verify command/.NET-type filtering, file-path isolation, and job-based termination are implemented securely and cannot be trivially bypassed; (3) verify runtime requirements (PowerShell version, OS) and that your agent environment meets them; (4) test the implementation in an isolated VM with no network access and inspect audit logs for behavior; (5) avoid using the -AllowNetwork option unless you have audited the code; (6) be skeptical of the included TEST_RESULTS.md until you can reproduce those tests against the real code. These inconsistencies could be an oversight or a sign of incomplete/mispackaged skill — proceed only after obtaining and reviewing the actual implementation.

Type: OpenClaw Skill Name: powershell-sandbox Version: 0.1.0 The skill bundle provides a PowerShell execution environment, which is an inherently high-risk capability. While the documentation in SKILL.md describes robust security features such as command whitelisting, .NET type restrictions, and timeout controls, the core implementation file (src/sandbox.ps1) is missing from the provided content, making these security claims unverifiable. The inclusion of a high-risk '-AllowNetwork' parameter and the inherent nature of shell access align with the criteria for a suspicious classification.