openclaw-sandbox

What problem does it solve?

This Skill provides robust Docker-based sandboxing for tool execution, ensuring that potentially risky operations are isolated from the host system, enhancing security and stability.

Core Features & Use Cases

• Configurable Isolation: Define the scope and mode of sandboxing (session, agent, shared) for different execution contexts.
• Workspace Management: Control how agents access their workspace within the sandbox (none, read-only, read-write).
• Customization: Mount host directories into the sandbox and configure network access and environment variables.
• Use Case: When running untrusted code or tools that require specific dependencies, configure the sandbox to use a read-only workspace and no network access to prevent unintended side effects.

Quick Start

Configure the sandbox to use 'non-main' mode with 'session' scope and 'rw' workspace access.