Identify and exploit vm2 sandbox escape vectors with reproducible test cases.
npx skills add https://github.com/patriksimek/vm2 --skill hacker-patriksimek
Please help me install this Agent Skill. Skill: hacker Source: https://github.com/patriksimek/vm2/tree/main/.claude/skills/hacker Command: npx skills add https://github.com/patriksimek/vm2 --skill hacker-patriksimek
Red team agent for vm2 sandbox escape testing. Systematically attempts to break out of the vm2 JavaScript sandbox by exploiting known and novel attack vectors. Use this skill whenever the user makes changes to vm2's sandbox code (bridge.js, setup-sandbox.js, setup-node-sandbox.js, vm.js, nodevm.js, transformer.js) and wants to verify the sandbox still holds. Also use when the user asks to "hack", "attack", "test security", "try to escape", "red team", or "pentest" the sandbox. Trigger on any request to find sandbox escapes or verify sandbox integrity.
Run the hacker skill after each sandbox code change to initiate a red-team check and verify no escape vectors are available.
High-intent search queries and answers about installing and using this skill.
To test a vm2 sandbox for escape vulnerabilities, use a red-team attack simulation agent that systematically targets host-sandbox interaction vectors in bridge, transformer, and node sandbox components to validate isolation guarantees.
Run pentest checks on your JavaScript sandbox whenever sandbox code like bridge.js, setup-sandbox.js, or transformer.js is changed or updated, ensuring you surface regressions and verify the sandbox still holds against novel attack vectors.
Verifying vm2 sandbox isolation involves exploiting known and novel host-sandbox interaction vectors across bridge, transformer, and node sandbox components, systematically attempting to break out to confirm no escape paths exist.
Yes, you can generate reproducible Mocha-based test cases for sandbox escape findings. The red-team process documents identified vulnerabilities with actionable remediation guidance to guide secure fixes.
Yes, the hacker skill works with vm2 node sandbox components, specifically targeting setup-node-sandbox.js, nodevm.js, and vm.js to identify potential host-sandbox interaction vectors and validate isolation after code updates.
The primary limitation is that attack simulation focuses on vm2 sandbox integrity specifically, requiring execution after each code change to detect regressions, and does not guarantee absolute security against undiscovered future escape techniques.
riparinoMap Windows security boundaries for privilege escalation planning and sandbox research.
thesaifalitaiWrite and execute software tests for functionality, performance, and security.
nanorepublicaStandardize unit-test coding practices across Claude Code projects.
thrashr888Execute arbitrary commands in isolated microVMs or containers.
