Execute high-risk shell commands inside isolated uv venv or Docker environments.
npx skills add https://github.com/reiserwang/Coding_Agent --skill sandbox-exec
Please help me install this Agent Skill. Skill: sandbox-exec Source: https://github.com/reiserwang/Coding_Agent/tree/main/.gemini/skills/sandbox-exec Command: npx skills add https://github.com/reiserwang/Coding_Agent --skill sandbox-exec
Execute high-risk shell operations inside a protected, isolated environment to prevent local machine contamination and accidental damage.
Set SANDBOX_MODE in SCRATCHPAD.md and run sandbox-exec:run <command> to execute it inside an isolated environment.
High-intent search queries and answers about installing and using this skill.
To isolate risky shell operations, execute them inside a protected environment using uv venv by default or Docker for heavier tasks. This prevents local machine contamination during database migrations, dependency upgrades, and destructive file operations while capturing logs and automating teardown.
The best way to sandbox dependency upgrades and scaffold generators is executing them inside isolated environments. Using uv venv provides process isolation with minimal dependencies, while Docker offers OS-level isolation as a fallback for commands requiring stricter container boundaries.
Yes, you can use Docker for shell command isolation instead of uv venv. Docker acts as a fallback providing OS-level container boundaries for heavier tasks, while uv venv remains the default for standard process isolation with minimal dependencies during destructive file operations.
To configure sandbox mode for destructive file operations, set the SANDBOX_MODE variable in SCRATCHPAD.md. This mode selection controls how commands execute within the isolated environment, ensuring safe auditable workflows with log capture and teardown orchestrated via sandbox IDs.
You should not use uv venv for isolating shell commands when tasks require heavier OS-level isolation or container boundaries. In these cases, switch to Docker as a fallback to safely execute high-risk shell operations and prevent accidental damage during destructive file operations.
staticWagomUSet up and run Python projects with isolated environments via uv, poetry, or venv.
LopeWaleProvision and manage Ignition gateway sandboxes with Docker Compose.
testdriveraiExecute JavaScript and PowerShell commands in a sandboxed Windows environment.
jchildreeCreate and isolate Git worktrees to prevent workspace contamination.
