cube-sandbox

Execute untrusted Python or shell code in an isolated Cube Sandbox.

Updated Apr 26, 2026
One-click install
npx skills add https://github.com/dawsonblock/HERMY --skill cube-sandbox
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cube-sandbox
Source: https://github.com/dawsonblock/HERMY/tree/main/CubeSandbox-master/examples/openclaw-integration/skills/cube-sandbox
Command: npx skills add https://github.com/dawsonblock/HERMY --skill cube-sandbox

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Cube Sandbox 安全沙箱执行技能提供一个隔离执行环境,用于在不信任代码上执行 Python 代码、Shell 命令,确保主机系统的安全和稳定。

Core Features & Use Cases

  • 安全隔离执行:在沙箱中运行代码,防止对宿主系统造成副作用。
  • 环境自定义:支持挂载宿主目录、网络策略控制(完全断网、白名单、黑名单)、内存快照暂停/恢复。
  • 与 E2B/Cube API 兼容:通过环境变量 E2B_API_URL 指向 Cube 部署,结合 Cube Sandbox API 使用。

Quick Start

Create a sandbox using Cube Sandbox and run your Python or shell code inside it.

Frequently Asked Questions about cube-sandbox

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely run untrusted Python code in an isolated environment?

You can safely execute untrusted Python code by deploying it inside an isolated Cube Sandbox. This sandbox execution environment prevents side effects to the host system by providing controlled input/output and secure boundaries.

What do I need to set up a Cube Sandbox for shell command execution?

Setting up a Cube Sandbox for shell command execution requires providing an E2B_API_URL, a Template ID, and an API key. You can additionally configure TLS certificates and network policies via environment variables.

Can I apply network policies to restrict internet access during secure code execution?

Yes, you can apply network policies to restrict internet access during secure code execution. The Cube Sandbox supports configuring complete network disconnection, whitelists, and blacklists to control outbound traffic.

Does the sandbox environment support mounting host directories and memory snapshots?

Yes, the sandbox environment supports mounting host directories for localized file access and memory snapshots. You can pause and resume the sandboxed environment using memory snapshots to save and restore execution states.

When should I use an isolated sandbox for data processing instead of local execution?

You should use an isolated sandbox for data processing when running unverified scripts or requiring reproducible environments. It prevents untrusted code from compromising your host system during secure experimentation and testing.