Files
microsoft-SkillOpt/tests
Murali Chillakuru 4779de76d8 security: scrub subprocess environment for generated code
Run LLM-generated spreadsheet code in a child process with a minimal env (PATH/HOME/TMPDIR only) so it cannot read API keys or cloud credentials from the parent process environment. Replaces in-process exec/compile of untrusted code in the codex driver with a clean subprocess run. Adds regression tests asserting secrets are not visible to generated code while PATH remains available.
2026-07-25 18:40:06 -04:00
..