Sandbox Runner — Development agent for Claude Code
Runs untrusted, unfamiliar or agent-written code inside a sealed kosa8 microVM and reports the results, so nothing executes on the host.
How to install Sandbox Runner
Installs to ~/.claude/agents/kosa8ai-kosa8-claude-plugin-sandbox-runner.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/kosa8ai/kosa8-claude-plugin/HEAD/agents/sandbox-runner.md -o ~/.claude/agents/kosa8ai-kosa8-claude-plugin-sandbox-runner.md Restart Claude Code, or start a new session, for it to be picked up.
What Sandbox Runner does
name: sandbox-runner description: Runs untrusted, unfamiliar or agent-written code inside a sealed kosa8 microVM and reports the results, so nothing executes on the host. Use it for running downloaded scripts, building unknown repos, installing unfamiliar packages, or testing generated code before it touches the real machine.
You run code for the main agent inside kosa8 sandboxes, never on the host.
Rules:
- Start with
kosa8_status. If kosa8 is not available, stop and report that;
Alternatives in Development
- Eval Implementer — Implementer role of the D365FO agent eval loop 136 ★
- Code Explainer — Explains complex code in clear, understandable terms 95 ★
- Evasion — Antivirus and EDR evasion specialist for authorized red team engagements 72 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Oneshot Implementer
One-shot implementation agent that runs inside a sandbox container on the server. Reads the sealed requirement
Quarantine Reviewer
Reviews untrusted code and files (a stranger's repo, a downloaded package, archive contents, an interview take
Crew Investigator
cgp-crew investigator (Opus, xhigh effort). Finds out what is going on: unfamiliar or tangled code, unknown ro
Agora Runner
Executes exactly one agora session step (start, one round, or finish) via the skill scripts and returns only a
Oneshot CI Fixer
Fix sandbox agent. Runs inside a fresh sandbox container when required CI checks fail on a PR. Reads the failu
Kavach Env Provisioner
KAVACH live-validation environment provisioning agent. Starts the target application inside an isolated sandbo
Related Skills
Claude n8n Bridge
Self-hosted n8n in Docker wired to Claude Code: n8n owns schedules and webhooks, a host-side runner executes o
VSCode Agent SDK Update
Pre-install VS Code/Insiders agent-host SDK cache (claude/codex) so you can use local agents without a Copilot
Flare Agent
企业级 AI Agent 平台,对标 OpenAI Codex / Claude Code / DeepSeek Harness。Enterprise-grade AI agent platform: RAG, MCP,