The published npm package "praisonai" exports a TypeScript "SandboxExecutor" with a "network-isolated" mode. The CLI lists that mode as: The implementation does not create a network namespace, firewall rule, socket filter, or proxy-enforced execution boundary. It only injects proxy environment variables into the child process: Clients that do not explicitly honor those proxy variables continue to use the host network stack. A local-only PoV shows that, inside "mode: "network-isolated"", a proxy-aware Node invocation is stopped, while a plain Node HTTP client reaches a loopback HTTP server from the same sandboxed command environment. This is a network-isolation protection failure in an exported npm API and CLI mode. It is not a generic claim that every PraisonAI sandbox backend is affected.