Search results

[Risky Workflow] Potential Risks of Running the SDK Publish Workflow as a Fork Tester

Status: Open.

#182 In agent-infra/sandbox;

· EthanThePhoenix38 opened on Apr 19, 2026

examples/browser-use-cua: duplicate imports, Tools() instantiation, and __main__ block

Status: Open.

#180 In agent-infra/sandbox;

· Ricardo-M-L opened on Apr 17, 2026

examples/site-to-markdown: raw HTML injected into f-string inside triple-quote literal

Status: Open.

#178 In agent-infra/sandbox;

· Ricardo-M-L opened on Apr 17, 2026

Volcengine provider: catch blocks silently swallow errors via return error

Status: Open.

#176 In agent-infra/sandbox;

· Ricardo-M-L opened on Apr 17, 2026

Volcengine provider: createSandbox/listSandboxes produce duplicate PascalCase+camelCase keys in JSON body

Status: Open.

#174 In agent-infra/sandbox;

· Ricardo-M-L opened on Apr 17, 2026

evaluation: agent loop max_iterations fallback returns tool response instead of assistant message

Status: Open.

#172 In agent-infra/sandbox;

· Ricardo-M-L opened on Apr 16, 2026

root用户浏览器相关操作均失败

Status: Open.

#170 In agent-infra/sandbox;

· Kenwwww opened on Apr 16, 2026

All the code in the Docker image can be open-sourced, right?

Status: Open.

#168 In agent-infra/sandbox;

· SecretSun opened on Apr 13, 2026

/v1/shell/exec 增加环境变量参数

Status: Open.

#165 In agent-infra/sandbox;

· jdkuangxx opened on Apr 8, 2026

有类似session机制吗？多Agent同时访问sandbox如何隔离+多轮上下文

Status: Open.

#164 In agent-infra/sandbox;

· kilsoul opened on Apr 8, 2026

bash api not support in the latest version

Status: Open.

#160 In agent-infra/sandbox;

· fanfankill opened on Apr 2, 2026

Security audit findings — tool description injection + missing output sanitization

Status: Open.

#157 In agent-infra/sandbox;

· manja316 opened on Mar 27, 2026