googleOfficial·28 Agent Skills Included

capsem

Sandbox coding agents in isolated, monitored Linux VMs

Sandboxes coding agents inside hardware-isolated Linux VMs on macOS and Linux with full network control. Inspects HTTPS traffic, routes MCP tool calls, and records per-session telemetry without trusting the guest. Eliminates the risk of agents running untrusted commands directly on your host machine.

68|10

↗

npx skills add google/capsem --all -g -y

Available:

Gives the agent one shared contract for working in this repository, including quick-start commands, the crate layout, and a routing table that tells it which sub-skill to load before coding, testing, debugging, or releasing.

All Skills in This Repository (28)

Pure Emerald Level Indicators

📦 In Repo

google

site-architecture

Explain Capsem host/guest architecture, vsock ports, storage modes, and MITM proxy workflow.

dev-capsem

Map Capsem's codebase structure, crates, and skill locations.

dev-mitm-proxy

Develop and maintain Capsem's MITM proxy for TLS traffic inspection.

build-images

Build Capsem VM images from TOML configs with Docker or Podman.

dev-benchmark

Automate Capsem performance benchmarking in a VM and output JSON reports.

dev-testing-vm

Run capsem-doctor diagnostics and manage test fixtures inside the guest VM.

find-skills

Search a public skills registry and install agent skills via npx.

build-initrd

Repacks initrd and manages guest binaries for Capsem boot processes.

dev-testing-hypervisor

Automate and validate Capsem hypervisor tests across Apple VZ and KVM backends.

dev-testing-frontend

Automate frontend testing and visual verification for Astro 5 and Svelte 5.

dev-debugging

Diagnose and fix Capsem bugs through a test-driven three-step debugging workflow.

organize-skills

Organize skill definitions into canonical skills/ directories with SKILL.md metadata.

Official

Basic

Frequently Asked Questions

FAQPage Schema

How to install Capsem?▼

Run `npx skills add google/capsem --all -g -y` in your terminal to install all skills in this suite globally.

What does Capsem do?▼

Capsem runs coding agents inside air-gapped Linux VMs on macOS and Linux, with HTTPS inspection, MCP tool routing, and per-session telemetry so untrusted code never touches your host directly.

Which platforms does Capsem support?▼

It supports macOS 14+ on Apple Silicon via Virtualization.framework, and Ubuntu 24.04+ or Debian 13+ on x86_64 or arm64 with KVM.

What do the Capsem skills cover?▼

The skills guide agents through developing Capsem itself: Rust patterns, VM and hypervisor testing, image builds, release gates, debugging, benchmarking, and the frontend design system.

Do these skills work with Claude Code and Gemini CLI?▼

Yes. All skills use the standard SKILL.md format and are discovered by Claude Code, Gemini CLI, Codex, and Cursor through the shared skills directory.