Tencent/WeKnora · error

script contains dangerous command

Error message

script contains dangerous command

What it means

Sentinel returned when the sandbox security scanner detects a dangerous command in the script (e.g. rm -rf, fork bombs, privileged/system-altering shell commands). The script is rejected before execution as a hard security control.

Source

Thrown at internal/sandbox/sandbox.go:106

	// (excluding user script execution which has its own per-call timeout).
	DefaultCubeHTTPTimeout = 30 * time.Second

	// DefaultE2BSandboxTTL matches the E2B SDK's built-in default so an
	// unset E2BSandboxTTL still yields a valid sandbox lifetime.
	DefaultE2BSandboxTTL = 5 * time.Minute
	// DefaultE2BHTTPTimeout bounds a single HTTP call to the E2B API.
	DefaultE2BHTTPTimeout = 30 * time.Second
)

// Common errors
var (
	ErrSandboxDisabled   = errors.New("sandbox is disabled")
	ErrTimeout           = errors.New("execution timed out")
	ErrScriptNotFound    = errors.New("script not found")
	ErrInvalidScript     = errors.New("invalid script")
	ErrExecutionFailed   = errors.New("script execution failed")
	ErrSecurityViolation = errors.New("security validation failed")
	ErrDangerousCommand  = errors.New("script contains dangerous command")
	ErrArgInjection      = errors.New("argument injection detected")
	ErrStdinInjection    = errors.New("stdin injection detected")
)

// Sandbox defines the interface for isolated script execution
type Sandbox interface {
	// Execute runs a script in an isolated environment
	Execute(ctx context.Context, config *ExecuteConfig) (*ExecuteResult, error)

	// Cleanup releases sandbox resources
	Cleanup(ctx context.Context) error

	// Type returns the sandbox type
	Type() SandboxType

	// IsAvailable checks if the sandbox is available for use
	IsAvailable(ctx context.Context) bool
}

View on GitHub (pinned to 988cbb0330)

Solutions

1. Rewrite the script to avoid the flagged dangerous command
2. Use sandbox-provided safe APIs instead of shell-level system operations
3. Review the scanner's blocklist to understand which pattern matched
4. Never attempt to obfuscate around the check — treat it as final

When it happens

Trigger: Thrown at internal/sandbox/sandbox.go:106 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of Tencent/WeKnora@988cbb0330 (2026-09-02). Data as JSON: /api/errors/f2c600db1ccb8425. Report an issue: GitHub.