xiaodsxiaodsCommunityยท1 Agent Skills Included

k8e

Secure isolated sandbox execution for untrusted code at scale

Runs untrusted code inside isolated Kubernetes sandboxes using gVisor, Kata, or Firecracker runtimes. Eliminates the risk of executing generated code directly on your host machine or production servers. Provides warm pools, session management, snapshots, and network egress controls through one simple CLI. Connects coding assistants to sandbox infrastructure so every command runs safely off-host.
npx skills add xiaods/k8e --all -g -y
Available:

Explains the repository architecture, build commands, and sandbox execution flows so the coding agent can navigate, build, and test this Kubernetes distribution correctly.

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install k8e?โ–ผ

Run `npx skills add xiaods/k8e --all -g -y` in your terminal to install all skills in this suite globally.

How to run AI-generated code safely?โ–ผ

Use the k8e-sandbox skill to execute all code inside isolated gVisor, Kata, or Firecracker sandboxes instead of on your host machine.

Does k8e work with Claude Code and Codex?โ–ผ

Yes. The k8e-sandbox-cli connect command installs the skill directly into Claude Code, Codex, Pi, and dsh harnesses.

How fast do k8e sandbox sessions start?โ–ผ

Pre-booted warm pool pods let sessions be claimed in under 500 milliseconds, avoiding cold-start delays.

Can I control network access from a sandbox?โ–ผ

Yes. Per-session egress allowlists are enforced via Cilium eBPF, and you can add or remove allowed hosts live with the allow-hosts command.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’