aeroxy

Cage Bro — AI skill for Claude Code

AI community

A sandboxed execution environment for AI agents.

How to install Cage Bro

This entry records only its repository, not the path inside it, so there is no exact command to give. Open aeroxy/cage-bro and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Cage Bro does

A sandboxed execution environment for AI agents. Single Rust binary with browser, shell, code execution, file ops, and MCP server.

Alternatives in AI

  • Nodeterm — Node-based terminal manager for AI coding agents — tmux-backed terminals and parallel agent sessions as dragga 1.3k ★
  • Dinotty — Multi-device terminal server for AI coding agents 643 ★
  • Agenvoy — Self-hosted AI agent harness in a single Go binary — writes, sandbox-tests and repairs its own tools, and lets 474 ★

README

cage-bro

cage-bro

crates.io npm CLI PyPI CLI License

A sandboxed execution environment for AI agents. Single Rust binary with browser, shell, code execution, file ops, and MCP server.

📖 **[Guide: isolated workspaces for fleets of agents →](https://github.com/aeroxy/cage-bro/blob/main/GUIDE.md)** — run many agents on one box, each jailed to its own workspace, or drive a clean remote sandbox in a VM.

Why cage-bro

Claude Desktop sandbox Docker sandbox cage-bro
Works with Claude only Any Any agent (LangChain, CrewAI, OpenAI, custom)
Browser None Manual setup Obscura (stealth, CDP)
Code exec None Any (manual) Python, Node, Jupyter + any language via shell
Terminal None Full Full PTY
Self-hosted No (Anthropic controls it) Yes Yes, your infra
API Claude Desktop only None (manual) REST + MCP
Memory N/A ~2GB per container (Chromium) ~100MB per sandbox
Init time N/A Seconds ~1ms
Density N/A 1 container per VM 20+ sandboxes per 1c1g VM

Claude's sandbox is a security layer. Docker is a general-purpose container. cage-bro is an agent execution environment.

**Why use cage-bro:**

  1. Framework-agnostic — one sandbox for all your agents, not per-vendor
  2. Browser + code + shell + files — full agent runtime, not just tool isol