360 Secure SkillHub
360 安全技能中心

XPR Code Sandbox

核心功能为提供隔离的V8沙箱执行JavaScript代码,含两种方式:`execute_js`适用于多步数据处理、算法测试,可传参并记录中间值;`eval_expression`用于快速运算、日期/数组操作。输入为JS代码或表达式,输出为计算结果及日志。典型场景含数学计算、数据转换,还可与CSV解析、结果存储等技能结合,无网络及文件系统访问,保障安全。

paulgnz
paulgnz
热度 81.65
最近更新 2026-05-20 03:40:05
分类:开发依赖:代码执行应用场景:数据处理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add xpr-code-sandbox
Metadata
name
code-sandbox
description
Execute JavaScript code in a sandboxed VM for data processing and computation

Code Sandbox

You have sandboxed JavaScript execution tools for computation and data processing:

Full scripts:

  • execute_js — run JavaScript code in an isolated V8 sandbox
    • Pass data via the input parameter (JSON) — access it as INPUT in your code
    • Use console.log() to capture intermediate values (returned in logs array)
    • Available globals: JSON, Math, Date, Array, Object, String, Number, RegExp, Map, Set, parseInt, parseFloat, isNaN, isFinite, encodeURIComponent, decodeURIComponent, atob, btoa
    • No network access, no filesystem, no imports — pure computation only
    • Default timeout 5 seconds, max 30 seconds
    • 10MB output limit

Quick expressions:

  • eval_expression — evaluate a single JavaScript expression and return the result
    • Use for quick math: "15 * 4500 * 0.01" → 675
    • Date calculations: "new Date().toISOString()"
    • Array operations: "[1,2,3].map(x => x*x)" → [1, 4, 9]

Best practices:

  • Use execute_js for multi-step data processing, algorithm testing, code validation
  • Use eval_expression for quick math, string ops, date calculations
  • Pass large datasets via input parameter rather than embedding in code
  • Combine with parse_csv (structured-data skill) for CSV → transform → output workflows
  • Combine with store_deliverable to save computed results as job evidence