Is it possible to use target command line tools, such as cm, inside a sandboxed app?

IoT Modules WP Series
1

Is it possible to use target command line tools, such as cm, inside a sandboxed app ?
If so - is an example .adef file available?

I have discovered by accident (on the FX30 WP85) that I need to use the following full path in an unsandboxed app - I’m not sure why this is the case

/legato/systems/current/bin/cm

And is the following a valid method of discovering (cm) app dependencies?
How do we discover which ones are in the sandbox by default?

~/ubuntuShare$ readelf -d cm | grep NEEDED
 0x00000001 (NEEDED)                     Shared library: [libComponent_cm.so]
 0x00000001 (NEEDED)                     Shared library: [liblegato.so]
 0x00000001 (NEEDED)                     Shared library: [libpthread.so.0]
 0x00000001 (NEEDED)                     Shared library: [librt.so.1]
 0x00000001 (NEEDED)                     Shared library: [libdl.so.2]
 0x00000001 (NEEDED)                     Shared library: [libm.so.6]
 0x00000001 (NEEDED)                     Shared library: [libc.so.6]

Thanks

John