shannot

Runs approved scripts in a sandboxed environment with SSH support and audit logging.

25|2|Updated Oct 20, 2025
One-click install
npx skills add https://github.com/corv89/shannot --skill shannot
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: shannot
Source: https://github.com/corv89/shannot/tree/main
Command: npx skills add https://github.com/corv89/shannot --skill shannot

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Run diagnostic scripts in a sandboxed environment to prevent unintended changes to the host, while enabling human oversight via MCP.

Core Features & Use Cases

  • PyPy sandbox with syscall interception to isolate host operations
  • MCP integration for Claude Desktop/Code to enable AI-assisted workflows
  • Interactive approval flow with per-operation visibility and audit logging
  • Support for local and remote (SSH) execution of diagnostic scripts

Quick Start

Run a diagnostic script in the sandbox and review the queued actions with shannot approve.

Frequently Asked Questions about shannot

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely execute Python diagnostic scripts without risking my host system?

You can safely execute Python diagnostic scripts by running them inside a PyPy sandbox that intercepts syscalls to isolate host system operations, preventing unintended changes to your local environment.

Can I run sandboxed diagnostic scripts on remote servers using SSH?

Yes, you can run sandboxed diagnostic scripts on remote servers via SSH, as the sandbox supports both local and remote execution to isolate operations across different machines.

Does this sandbox tool integrate with Claude Desktop or Claude Code via MCP?

Yes, the sandbox integrates with Claude Desktop and Claude Code through MCP, enabling AI-assisted workflows where you can review queued actions and safely approve operations.

How does the interactive approval workflow handle sandboxed script execution?

The interactive approval workflow provides per-operation visibility for sandboxed script execution, allowing you to review queued actions, configure profiles, and maintain audit logs of approved operations.

What are the limitations of using a PyPy sandbox for Python script execution?

The PyPy sandbox isolates host operations through syscall interception, meaning it is primarily designed for diagnostic scripts and may restrict direct system access required by certain Python libraries or operations.