enclave-sandbox-manager

Select Docker, macOS sandbox-exec, or Linux bwrap for enclave sessions.

2|Updated Feb 26, 2026
One-click install
npx skills add https://github.com/latchagent/latch-core --skill enclave-sandbox-manager
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: enclave-sandbox-manager
Source: https://github.com/latchagent/latch-core/tree/main/.agents/skills/enclave-sandbox-manager
Command: npx skills add https://github.com/latchagent/latch-core --skill enclave-sandbox-manager

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill simplifies the management of enclave sessions, offering a unified backend selection process for secure operation.

Core Features & Use Cases

  • Unified Backend Selection: Offers a selection cascade for choosing the best available backend based on system capabilities.
  • Session Management: Tracks and manages the lifecycle of enclave sessions, ensuring robust operation.
  • API Access: Provides key APIs for session registration, unregistration, and status checking.
  • Use Case: Use this Skill to manage and monitor enclave sessions for secure operations within a containerized environment.

Quick Start

Use the enclave-sandbox-manager skill to detect the best backend for an enclave session.

Frequently Asked Questions about enclave-sandbox-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage enclave sessions with automatic backend selection?

The manager coordinates enclave session creation by evaluating system capabilities and selecting Docker, macOS sandbox-exec, or Linux bwrap as the backend, refusing creation if no suitable backend exists.

Does enclave sandbox management work on macOS and Linux?

Yes, it supports macOS sandbox-exec and Linux bwrap backends for secure container operations, automatically detecting the appropriate backend during session registration based on system capabilities.

What happens when no suitable backend is found for an enclave session?

When no suitable backend is available, the manager refuses session creation to maintain robust container security and prevent unsafe sandbox operations.

Can I check the status of an active enclave session?

Yes, it provides APIs for status checking, allowing you to monitor active sessions and manage the full lifecycle including session registration and unregistration.

What is the best way to coordinate secure container operations across different platforms?

Using a unified backend selection cascade for enclave sessions ensures robust container operations by automatically matching Docker, sandbox-exec, or bwrap to your current platform capabilities.