Sandbox Configuration Skill
MANDATORY: Invoke docs-management First
STOP - Before providing ANY response about Claude Code sandboxing:
- INVOKE
docs-management skill
- QUERY for the user's specific topic
- BASE all responses EXCLUSIVELY on official documentation loaded
Skipping this step results in outdated or incorrect information.
Verification Checkpoint
Before responding, verify:
If ANY checkbox is unchecked, STOP and invoke docs-management first.
Overview
Central authority for Claude Code sandboxing and isolation. This skill uses 100% delegation to docs-management - it contains NO duplicated official documentation.
Architecture: Pure delegation with keyword registry. All official documentation is accessed via docs-management skill queries.
When to Use This Skill
Keywords: sandboxing, sandbox, /sandbox, filesystem isolation, network isolation, bubblewrap, Seatbelt, dangerouslyDisableSandbox, allowUnsandboxedCommands, excludedCommands, httpProxyPort, socksProxyPort, domain restrictions, sandbox configuration, blocked access
Use this skill when:
- Configuring sandbox settings
- Understanding filesystem isolation
- Setting up network isolation
- Troubleshooting sandbox blocking commands
- Understanding OS-level enforcement
- Configuring escape hatches
- Setting up proxy support
Keyword Registry for docs-management Queries
Use these keywords when querying docs-management skill for official documentation:
Sandbox Overview
| Topic |
Keywords |
| Overview |
"sandboxing", "sandboxed bash tool", "/sandbox command" |
| Why Sandbox |
"why sandboxing", "approval fatigue", "sandbox productivity" |
| OS Enforcement |
"bubblewrap", "Seatbelt", "OS-level enforcement" |
Filesystem Isolation
| Topic |
Keywords |
| Default Behavior |
"filesystem isolation", "sandbox filesystem", "default writes" |
| Blocked Access |
"blocked access", "sandbox blocked patterns" |
| Custom Paths |
"custom allowed paths", "custom denied paths" |
| Protection |
"critical file modification", "filesystem protection" |
Network Isolation
| Topic |
Keywords |
| Domain Restrictions |
"network isolation", "domain restrictions", "sandbox network" |
| Proxy Support |
"httpProxyPort", "socksProxyPort", "custom proxy" |
| User Confirmation |
"user confirmation domains", "new domain approval" |
Configuration Options
| Topic |
Keywords |
| Settings |
"sandbox configuration", "sandbox settings" |
| Escape Hatch |
"dangerouslyDisableSandbox", "allowUnsandboxedCommands" |
| Excluded Commands |
"excludedCommands", "sandbox exclusions" |
| Security Limitations |
"sandbox security limitations", "domain fronting" |
Quick Decision Tree
What do you want to do?
- Enable/disable sandbox -> Query docs-management: "sandboxing", "/sandbox command"
- Configure filesystem access -> Query docs-management: "filesystem isolation", "sandbox filesystem"
- Configure network access -> Query docs-management: "network isolation", "domain restrictions"
- Allow specific commands -> Query docs-management: "excludedCommands", "allowUnsandboxedCommands"
- Set up proxy -> Query docs-management: "httpProxyPort", "socksProxyPort"
- Understand limitations -> Query docs-management: "sandbox security limitations"
Topic Coverage
Sandbox System
- Sandboxed bash tool overview
- /sandbox slash command
- Why sandboxing matters (approval fatigue, productivity, autonomy)
- OS-level enforcement (bubblewrap on Linux, Seatbelt on macOS)
- Open source sandbox runtime
Filesystem Isolation Topics
- Default writes behavior
- Default read behavior
- Blocked access patterns
- Custom allowed and denied paths
- Protection against critical file modification
Network Isolation Topics
- Domain restrictions
- User confirmation for new domains
- Custom proxy support
- Comprehensive coverage for subprocesses
- httpProxyPort and socksProxyPort settings
Configuration Options Topics
- dangerouslyDisableSandbox escape hatch
- allowUnsandboxedCommands configuration
- excludedCommands list
- Security limitations and considerations
Troubleshooting Quick Reference
| Issue |
Keywords for docs-management |
| Sandbox blocking commands |
"excludedCommands", "allowUnsandboxedCommands" |
| Network requests blocked |
"network isolation", "domain restrictions" |
| Filesystem access denied |
"filesystem isolation", "blocked access" |
| Proxy not working |
"httpProxyPort", "socksProxyPort" |
Related Skills
- permission-management - For allow/deny/ask rules
- enterprise-security - For managed policies
- settings-management - For general configuration
Version History
- v1.0.0 (2025-11-30): Initial release (split from security-meta)
- Focused on sandboxing and isolation only
- Pure delegation architecture
- Comprehensive keyword registry
Last Updated
Date: 2025-11-30
Model: claude-opus-4-5-20251101
1---2name: sandbox-configuration3description: Central authority for Claude Code sandboxing and isolation. Covers sandboxed bash tool, /sandbox command, filesystem isolation (blocked access, custom paths), network isolation (domain restrictions, proxy support), OS-level enforcement (bubblewrap on Linux, Seatbelt on macOS), sandbox configuration options, escape hatches (dangerouslyDisableSandbox, allowUnsandboxedCommands), and sandbox security limitations. Assists with configuring sandbox settings, understanding isolation mechanisms, and troubleshooting sandbox issues. Delegates 100% to docs-management skill for official documentation.4---5
6# Sandbox Configuration Skill
7
8## MANDATORY: Invoke docs-management First
9
10> **STOP - Before providing ANY response about Claude Code sandboxing:**
11>
12> 1. **INVOKE** `docs-management` skill
13> 2. **QUERY** for the user's specific topic
14> 3. **BASE** all responses EXCLUSIVELY on official documentation loaded
15>
16> **Skipping this step results in outdated or incorrect information.**
17
18### Verification Checkpoint
19
20Before responding, verify:
21
22- [ ] Did I invoke docs-management skill?
23- [ ] Did official documentation load?
24- [ ] Is my response based EXCLUSIVELY on official docs?
25
26If ANY checkbox is unchecked, STOP and invoke docs-management first.
27
28---
29
30## Overview
31
32Central authority for Claude Code sandboxing and isolation. This skill uses **100% delegation to docs-management** - it contains NO duplicated official documentation.
33
34**Architecture:** Pure delegation with keyword registry. All official documentation is accessed via docs-management skill queries.
35
36## When to Use This Skill
37
38**Keywords:** sandboxing, sandbox, /sandbox, filesystem isolation, network isolation, bubblewrap, Seatbelt, dangerouslyDisableSandbox, allowUnsandboxedCommands, excludedCommands, httpProxyPort, socksProxyPort, domain restrictions, sandbox configuration, blocked access
39
40**Use this skill when:**
41
42- Configuring sandbox settings
43- Understanding filesystem isolation
44- Setting up network isolation
45- Troubleshooting sandbox blocking commands
46- Understanding OS-level enforcement
47- Configuring escape hatches
48- Setting up proxy support
49
50## Keyword Registry for docs-management Queries
51
52Use these keywords when querying docs-management skill for official documentation:
53
54### Sandbox Overview
55
56| Topic | Keywords |
57| --- | --- |
58| Overview | "sandboxing", "sandboxed bash tool", "/sandbox command" |
59| Why Sandbox | "why sandboxing", "approval fatigue", "sandbox productivity" |
60| OS Enforcement | "bubblewrap", "Seatbelt", "OS-level enforcement" |
61
62### Filesystem Isolation
63
64| Topic | Keywords |
65| --- | --- |
66| Default Behavior | "filesystem isolation", "sandbox filesystem", "default writes" |
67| Blocked Access | "blocked access", "sandbox blocked patterns" |
68| Custom Paths | "custom allowed paths", "custom denied paths" |
69| Protection | "critical file modification", "filesystem protection" |
70
71### Network Isolation
72
73| Topic | Keywords |
74| --- | --- |
75| Domain Restrictions | "network isolation", "domain restrictions", "sandbox network" |
76| Proxy Support | "httpProxyPort", "socksProxyPort", "custom proxy" |
77| User Confirmation | "user confirmation domains", "new domain approval" |
78
79### Configuration Options
80
81| Topic | Keywords |
82| --- | --- |
83| Settings | "sandbox configuration", "sandbox settings" |
84| Escape Hatch | "dangerouslyDisableSandbox", "allowUnsandboxedCommands" |
85| Excluded Commands | "excludedCommands", "sandbox exclusions" |
86| Security Limitations | "sandbox security limitations", "domain fronting" |
87
88## Quick Decision Tree
89
90**What do you want to do?**
91
921. **Enable/disable sandbox** -> Query docs-management: "sandboxing", "/sandbox command"
932. **Configure filesystem access** -> Query docs-management: "filesystem isolation", "sandbox filesystem"
943. **Configure network access** -> Query docs-management: "network isolation", "domain restrictions"
954. **Allow specific commands** -> Query docs-management: "excludedCommands", "allowUnsandboxedCommands"
965. **Set up proxy** -> Query docs-management: "httpProxyPort", "socksProxyPort"
976. **Understand limitations** -> Query docs-management: "sandbox security limitations"
98
99## Topic Coverage
100
101### Sandbox System
102
103- Sandboxed bash tool overview
104- /sandbox slash command
105- Why sandboxing matters (approval fatigue, productivity, autonomy)
106- OS-level enforcement (bubblewrap on Linux, Seatbelt on macOS)
107- Open source sandbox runtime
108
109### Filesystem Isolation Topics
110
111- Default writes behavior
112- Default read behavior
113- Blocked access patterns
114- Custom allowed and denied paths
115- Protection against critical file modification
116
117### Network Isolation Topics
118
119- Domain restrictions
120- User confirmation for new domains
121- Custom proxy support
122- Comprehensive coverage for subprocesses
123- httpProxyPort and socksProxyPort settings
124
125### Configuration Options Topics
126
127- dangerouslyDisableSandbox escape hatch
128- allowUnsandboxedCommands configuration
129- excludedCommands list
130- Security limitations and considerations
131
132## Troubleshooting Quick Reference
133
134| Issue | Keywords for docs-management |
135| --- | --- |
136| Sandbox blocking commands | "excludedCommands", "allowUnsandboxedCommands" |
137| Network requests blocked | "network isolation", "domain restrictions" |
138| Filesystem access denied | "filesystem isolation", "blocked access" |
139| Proxy not working | "httpProxyPort", "socksProxyPort" |
140
141## Related Skills
142
143- **permission-management** - For allow/deny/ask rules
144- **enterprise-security** - For managed policies
145- **settings-management** - For general configuration
146
147## Version History
148
149- **v1.0.0** (2025-11-30): Initial release (split from security-meta)
150 - Focused on sandboxing and isolation only
151 - Pure delegation architecture
152 - Comprehensive keyword registry
153
154---
155
156## Last Updated
157
158**Date:** 2025-11-30
159**Model:** claude-opus-4-5-20251101
majiayu000