lightning-sandboxes

Manage ephemeral virtual machines for secure code execution via Lightning AI.

5|Updated Jul 3, 2026
One-click install
npx skills add https://github.com/Lightning-AI/skills --skill lightning-sandboxes
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: lightning-sandboxes
Source: https://github.com/Lightning-AI/skills/tree/main/lightning-sandboxes
Command: npx skills add https://github.com/Lightning-AI/skills --skill lightning-sandboxes

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires lightning-sdk, websocket-client.

What problem does it solve?

This skill solves the challenge of executing untrusted or experimental code in a safe, isolated environment without risking your local machine or requiring complex infrastructure setup.

Core Features & Use Cases

  • Isolated Execution: Run code in ephemeral, gVisor-backed VMs with configurable network egress policies.
  • Persistence & Snapshots: Create persistent devboxes that support auto-snapshots, allowing you to pause, resume, and branch your development environments.
  • Use Case: Use this to safely execute generated code, test scripts in a clean environment, or spin up a custom container image from a registry to poke around without affecting your local system.

Quick Start

Use the lightning-sandboxes skill to create a new persistent development environment named devbox with Python 3.13 support.

Frequently Asked Questions about lightning-sandboxes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run untrusted code in an isolated cloud sandbox?

Run untrusted code in an isolated cloud sandbox using ephemeral, gVisor-backed virtual machines that provide a secure execution environment without risking your local machine.

Can I create persistent development environments with auto-snapshots in cloud VMs?

Yes, you can create persistent development environments in cloud VMs that support auto-snapshots, allowing you to pause, resume, and branch your custom devbox configurations.

How does network egress policy enforcement work for ephemeral virtual machines?

Network egress policy enforcement for ephemeral virtual machines works by applying configurable network rules within the isolated, gVisor-backed cloud execution environment to control external access.

Do I need lightning-sdk and teamspace API credentials to manage cloud sandboxes?

Yes, you need the lightning-sdk and appropriate teamspace-scoped API credentials to interface with the Lightning AI cloud infrastructure and manage cloud sandbox lifecycles.

What are the limitations of using ephemeral VMs for experimental code execution?

A limitation of using ephemeral VMs for experimental code execution is that they are temporary by nature, requiring snapshot creation if you need to persist your development environment state.