Method _security_check

ms_agent/skill/container.py:462–485

Check code for potentially dangerous patterns. Args: code: Code string to check. is_local: If True, use stricter patterns for local execution. Returns: Tuple of (is_safe, reason).

(self,
                        code: str,
                        is_local: bool = False)

        return f'{self.SANDBOX_ROOT}/skills/{safe_id}'

    def _security_check(self,
                        code: str,
                        is_local: bool = False) -> tuple[bool, str]:
        """
        Check code for potentially dangerous patterns.

        Args:
            code: Code string to check.
            is_local: If True, use stricter patterns for local execution.

        Returns:
            Tuple of (is_safe, reason).
        """
        if not self.enable_security_check:
            return True, ''

        # Use stricter patterns for local execution
        patterns = LOCAL_DANGEROUS_PATTERNS if is_local else DANGEROUS_PATTERNS

        for pattern in patterns:
            if re.search(pattern, code, re.IGNORECASE):
                return False, f'Dangerous pattern detected: {pattern}'

        return True, ''

    def _validate_path_in_workspace(self, path: Path) -> bool:
        """