sandboxed-agent-git-relay
CommunitySafely ship agent changes to GitHub
Software Engineering#github#pull requests#sandbox#agent automation#github app#credential isolation#git relay
Authorokayus
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill solves the security challenge of allowing sandboxed coding agents to create GitHub branches and pull requests without exposing credentials or granting direct repository write access inside the sandbox.
Core Features & Use Cases
- Credential-Free Agent Delivery: Uses a host-side relay with GitHub App tokens to push agent commits and create pull requests while keeping secrets outside the sandbox boundary.
- Controlled Merge Automation: Supports explicit commit-trailer based merge delegation with server-side CI safeguards and protection against squash-merge replay loops.
- Use Case: Enable an autonomous Claude Code workflow in a Docker sandbox where the agent can commit changes, while a host service safely handles GitHub publishing and optional merging.
Quick Start
Use the sandboxed-agent-git-relay skill to configure a host-side GitHub App relay that publishes agent-created branches as pull requests without storing credentials in the container.
Dependency Matrix
Required Modules
None requiredComponents
references
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: sandboxed-agent-git-relay Download link: https://github.com/okayus/okayus-skills/archive/main.zip#sandboxed-agent-git-relay Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 545,000+ vetted skills library on demand.