Run pytest-based diagnostic suites inside Capsem VMs to validate sandbox health.
npx skills add https://github.com/google/capsem --skill dev-capsem-doctor
Please help me install this Agent Skill. Skill: dev-capsem-doctor Source: https://github.com/google/capsem/tree/main/skills/dev-capsem-doctor Command: npx skills add https://github.com/google/capsem --skill dev-capsem-doctor
Capsem-doctor provides end-to-end diagnostics inside the guest VM to verify sandbox integrity, network isolation, environment readiness, and AI agent functionality, acting as a gatekeeper for safe shipping.
Run capsem-doctor to execute the full diagnostic suite inside the Capsem VM.
High-intent search queries and answers about installing and using this skill.
Capsem-doctor executes a pytest-based diagnostic suite inside the guest VM to validate sandbox health, network isolation, and runtime hardening. It acts as a gatekeeper to ensure Capsem deployments meet safety and reliability standards before shipping.
Yes, the diagnostic suite supports running targeted subsets of tests as well as the full suite. This allows you to isolate specific VM sandbox regressions or focus on individual test categories without executing the entire workflow.
In-VM sandbox testing covers 11 test categories including isolation, hardening, and runtime validation. It verifies environment readiness, sandbox integrity, and AI agent functionality to act as a gatekeeper for safe shipping.
You can extend pytest coverage using the provided conftest infrastructure. This framework supports adding new tests and debugging existing VM sandbox issues across the 11 test categories to catch isolation and hardening regressions.
Yes, the diagnostic suite executes end-to-end checks directly inside the guest VM. Running the tests in-VM is required to accurately validate sandbox safety, network isolation, and runtime environment readiness.
googleRun capsem-doctor diagnostics and manage test fixtures inside the guest VM.
manuelbrandner85Generate minimal macOS Seatbelt sandbox configurations for process isolation.
AgentSecOpsLint OpenAPI/AsyncAPI definitions with Spectral to enforce security and governance rules.
plurigridRoute audio between macOS applications via a CoreAudio virtual driver.
