bobo070314 sandbox-executor
Runs commands in a read-only Docker container with:
- read-only root filesystem
- no new privileges
- dropped ALL capabilities
- network disabled by default
- 256MB memory limit
Falls back to native execution if Docker unavailable.
Sandbox Executor
Docker-isolated command runner with security constraints
Sandbox Executor by bobo070314 · 9a7ceae
npx skillmds@latest add bobo070314/sandbox-executor File contents
---name: sandbox-executordescription: Docker-isolated command runner with security constraints---# sandbox-executorRuns commands in a read-only Docker container with:- read-only root filesystem- no new privileges- dropped ALL capabilities- network disabled by default- 256MB memory limitFalls back to native execution if Docker unavailable.
bobo070314/openclaw-workspace/tree/main/skills/sandbox-executor commit 9a7ceae926
Frequently asked questions
Run npx skillmds@latest add bobo070314/sandbox-executor in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Docker-isolated command runner with security constraints It is listed under DevOps & Infra on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
bobo070314 (@bobo070314) published this skill. Their other Agent Skills are listed on their SkillMD profile.