Sandbox Configuration Skill
MANDATORY: Invoke docs-management First
STOP - Before providing ANY response about Claude Code sandboxing:
- INVOKE
docs-management skill
- QUERY for the user's specific topic
- BASE all responses EXCLUSIVELY on official documentation loaded
Skipping this step results in outdated or incorrect information.
Verification Checkpoint
Before responding, verify:
If ANY checkbox is unchecked, STOP and invoke docs-management first.
Overview
Central authority for Claude Code sandboxing and isolation. This skill uses 100% delegation to docs-management - it contains NO duplicated official documentation.
Architecture: Pure delegation with keyword registry. All official documentation is accessed via docs-management skill queries.
When to Use This Skill
Keywords: sandboxing, sandbox, /sandbox, filesystem isolation, network isolation, bubblewrap, Seatbelt, dangerouslyDisableSandbox, allowUnsandboxedCommands, excludedCommands, httpProxyPort, socksProxyPort, domain restrictions, sandbox configuration, blocked access
Use this skill when:
- Configuring sandbox settings
- Understanding filesystem isolation
- Setting up network isolation
- Troubleshooting sandbox blocking commands
- Understanding OS-level enforcement
- Configuring escape hatches
- Setting up proxy support
Keyword Registry for docs-management Queries
Use these keywords when querying docs-management skill for official documentation:
Sandbox Overview
| Topic |
Keywords |
| Overview |
"sandboxing", "sandboxed bash tool", "/sandbox command" |
| Why Sandbox |
"why sandboxing", "approval fatigue", "sandbox productivity" |
| OS Enforcement |
"bubblewrap", "Seatbelt", "OS-level enforcement" |
Filesystem Isolation
| Topic |
Keywords |
| Default Behavior |
"filesystem isolation", "sandbox filesystem", "default writes" |
| Blocked Access |
"blocked access", "sandbox blocked patterns" |
| Custom Paths |
"custom allowed paths", "custom denied paths" |
| Protection |
"critical file modification", "filesystem protection" |
Network Isolation
| Topic |
Keywords |
| Domain Restrictions |
"network isolation", "domain restrictions", "sandbox network" |
| Proxy Support |
"httpProxyPort", "socksProxyPort", "custom proxy" |
| User Confirmation |
"user confirmation domains", "new domain approval" |
Configuration Options
| Topic |
Keywords |
| Settings |
"sandbox configuration", "sandbox settings" |
| Escape Hatch |
"dangerouslyDisableSandbox", "allowUnsandboxedCommands" |
| Excluded Commands |
"excludedCommands", "sandbox exclusions" |
| Security Limitations |
"sandbox security limitations", "domain fronting" |
Quick Decision Tree
What do you want to do?
- Enable/disable sandbox -> Query docs-management: "sandboxing", "/sandbox command"
- Configure filesystem access -> Query docs-management: "filesystem isolation", "sandbox filesystem"
- Configure network access -> Query docs-management: "network isolation", "domain restrictions"
- Allow specific commands -> Query docs-management: "excludedCommands", "allowUnsandboxedCommands"
- Set up proxy -> Query docs-management: "httpProxyPort", "socksProxyPort"
- Understand limitations -> Query docs-management: "sandbox security limitations"
Topic Coverage
Sandbox System
- Sandboxed bash tool overview
- /sandbox slash command
- Why sandboxing matters (approval fatigue, productivity, autonomy)
- OS-level enforcement (bubblewrap on Linux, Seatbelt on macOS)
- Open source sandbox runtime
Filesystem Isolation Topics
- Default writes behavior
- Default read behavior
- Blocked access patterns
- Custom allowed and denied paths
- Protection against critical file modification
Network Isolation Topics
- Domain restrictions
- User confirmation for new domains
- Custom proxy support
- Comprehensive coverage for subprocesses
- httpProxyPort and socksProxyPort settings
Configuration Options Topics
- dangerouslyDisableSandbox escape hatch
- allowUnsandboxedCommands configuration
- excludedCommands list
- Security limitations and considerations
Troubleshooting Quick Reference
| Issue |
Keywords for docs-management |
| Sandbox blocking commands |
"excludedCommands", "allowUnsandboxedCommands" |
| Network requests blocked |
"network isolation", "domain restrictions" |
| Filesystem access denied |
"filesystem isolation", "blocked access" |
| Proxy not working |
"httpProxyPort", "socksProxyPort" |
Related Skills
- permission-management - For allow/deny/ask rules
- enterprise-security - For managed policies
- settings-management - For general configuration
Version History
- v1.0.0 (2025-11-30): Initial release (split from security-meta)
- Focused on sandboxing and isolation only
- Pure delegation architecture
- Comprehensive keyword registry
Last Updated
Date: 2025-11-30
Model: claude-opus-4-5-20251101
1---2name: sandbox-configuration-23description: Central authority for Claude Code sandboxing and isolation. Covers sandboxed bash tool, /sandbox command, filesystem isolation (blocked access, custom paths), network isolation (domain restrictions, proxy support), OS-level enforcement (bubblewrap on Linux, Seatbelt on macOS), sandbox configuration options, escape hatches (dangerouslyDisableSandbox, allowUnsandboxedCommands), and sandbox security limitations. Assists with configuring sandbox settings, understanding isolation mechanisms, and troubleshooting sandbox issues. Delegates 100% to docs-management skill for official documentation.4---56# Sandbox Configuration Skill78## MANDATORY: Invoke docs-management First910> **STOP - Before providing ANY response about Claude Code sandboxing:**11>12> 1. **INVOKE** `docs-management` skill13> 2. **QUERY** for the user's specific topic14> 3. **BASE** all responses EXCLUSIVELY on official documentation loaded15>16> **Skipping this step results in outdated or incorrect information.**1718### Verification Checkpoint1920Before responding, verify:2122- [ ] Did I invoke docs-management skill?23- [ ] Did official documentation load?24- [ ] Is my response based EXCLUSIVELY on official docs?2526If ANY checkbox is unchecked, STOP and invoke docs-management first.2728---2930## Overview3132Central authority for Claude Code sandboxing and isolation. This skill uses **100% delegation to docs-management** - it contains NO duplicated official documentation.3334**Architecture:** Pure delegation with keyword registry. All official documentation is accessed via docs-management skill queries.3536## When to Use This Skill3738**Keywords:** sandboxing, sandbox, /sandbox, filesystem isolation, network isolation, bubblewrap, Seatbelt, dangerouslyDisableSandbox, allowUnsandboxedCommands, excludedCommands, httpProxyPort, socksProxyPort, domain restrictions, sandbox configuration, blocked access3940**Use this skill when:**4142- Configuring sandbox settings43- Understanding filesystem isolation44- Setting up network isolation45- Troubleshooting sandbox blocking commands46- Understanding OS-level enforcement47- Configuring escape hatches48- Setting up proxy support4950## Keyword Registry for docs-management Queries5152Use these keywords when querying docs-management skill for official documentation:5354### Sandbox Overview5556| Topic | Keywords |57| --- | --- |58| Overview | "sandboxing", "sandboxed bash tool", "/sandbox command" |59| Why Sandbox | "why sandboxing", "approval fatigue", "sandbox productivity" |60| OS Enforcement | "bubblewrap", "Seatbelt", "OS-level enforcement" |6162### Filesystem Isolation6364| Topic | Keywords |65| --- | --- |66| Default Behavior | "filesystem isolation", "sandbox filesystem", "default writes" |67| Blocked Access | "blocked access", "sandbox blocked patterns" |68| Custom Paths | "custom allowed paths", "custom denied paths" |69| Protection | "critical file modification", "filesystem protection" |7071### Network Isolation7273| Topic | Keywords |74| --- | --- |75| Domain Restrictions | "network isolation", "domain restrictions", "sandbox network" |76| Proxy Support | "httpProxyPort", "socksProxyPort", "custom proxy" |77| User Confirmation | "user confirmation domains", "new domain approval" |7879### Configuration Options8081| Topic | Keywords |82| --- | --- |83| Settings | "sandbox configuration", "sandbox settings" |84| Escape Hatch | "dangerouslyDisableSandbox", "allowUnsandboxedCommands" |85| Excluded Commands | "excludedCommands", "sandbox exclusions" |86| Security Limitations | "sandbox security limitations", "domain fronting" |8788## Quick Decision Tree8990**What do you want to do?**91921. **Enable/disable sandbox** -> Query docs-management: "sandboxing", "/sandbox command"932. **Configure filesystem access** -> Query docs-management: "filesystem isolation", "sandbox filesystem"943. **Configure network access** -> Query docs-management: "network isolation", "domain restrictions"954. **Allow specific commands** -> Query docs-management: "excludedCommands", "allowUnsandboxedCommands"965. **Set up proxy** -> Query docs-management: "httpProxyPort", "socksProxyPort"976. **Understand limitations** -> Query docs-management: "sandbox security limitations"9899## Topic Coverage100101### Sandbox System102103- Sandboxed bash tool overview104- /sandbox slash command105- Why sandboxing matters (approval fatigue, productivity, autonomy)106- OS-level enforcement (bubblewrap on Linux, Seatbelt on macOS)107- Open source sandbox runtime108109### Filesystem Isolation Topics110111- Default writes behavior112- Default read behavior113- Blocked access patterns114- Custom allowed and denied paths115- Protection against critical file modification116117### Network Isolation Topics118119- Domain restrictions120- User confirmation for new domains121- Custom proxy support122- Comprehensive coverage for subprocesses123- httpProxyPort and socksProxyPort settings124125### Configuration Options Topics126127- dangerouslyDisableSandbox escape hatch128- allowUnsandboxedCommands configuration129- excludedCommands list130- Security limitations and considerations131132## Troubleshooting Quick Reference133134| Issue | Keywords for docs-management |135| --- | --- |136| Sandbox blocking commands | "excludedCommands", "allowUnsandboxedCommands" |137| Network requests blocked | "network isolation", "domain restrictions" |138| Filesystem access denied | "filesystem isolation", "blocked access" |139| Proxy not working | "httpProxyPort", "socksProxyPort" |140141## Related Skills142143- **permission-management** - For allow/deny/ask rules144- **enterprise-security** - For managed policies145- **settings-management** - For general configuration146147## Version History148149- **v1.0.0** (2025-11-30): Initial release (split from security-meta)150 - Focused on sandboxing and isolation only151 - Pure delegation architecture152 - Comprehensive keyword registry153154---155156## Last Updated157158**Date:** 2025-11-30159**Model:** claude-opus-4-5-20251101
majiayu000