# B602: subprocess shell=True is intentional — sandboxmcp's purpose is executing user commands
# B603: subprocess calls with variable input are core sandbox functionality
# B108: /tmp references are Docker tmpfs mounts for security hardening
skips:
  - B602
  - B603
  - B108
