ivan-pinatti-labs

Devcontainer Airlock — AI skill for Claude Code

AI community

Secure, layered devcontainers for AI coding agents: the agents work in a workbench with no GitHub token and no ssh key, code runs in isolated containers with no network, and a broker and an egress pro.

How to install Devcontainer Airlock

This entry records only its repository, not the path inside it, so there is no exact command to give. Open ivan-pinatti-labs/devcontainer-airlock and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Devcontainer Airlock does

Alternatives in AI

Open Science — Open Science Desktop — local-first, model-agnostic AI research workbench for macOS, Windows & Linux 1.5k ★
Vibe Astock — Vibe AStock：A 股短线复盘与跟踪工作台 · 盯盘异动、情绪复盘（连板天梯、题材轮动、明日验证）、AI 复盘与周报、交易日志、盘前提醒，182 个数据端点 679 ★
Registry Broker Skills — AI agent skills for the Universal Registry - search, chat, and register 72,000+ agents across 14+ protocols 410 ★

README

devcontainer-airlock

[![License](https://img.shields.io/github/license/ivan-pinatti-labs/devcontainer-airlock?logo=Github&style=for-the-badge)](LICENSE.md) [![GitHub issues](https://img.shields.io/github/issues-raw/ivan-pinatti-labs/devcontainer-airlock?logo=Github&style=for-the-badge)](https://github.com/ivan-pinatti-labs/devcontainer-airlock/issues) [![GitHub Sponsors](https://img.shields.io/github/sponsors/ivan-pinatti?logo=Github&style=for-the-badge)](https://github.com/sponsors/ivan-pinatti) [![GitHub Repo stars](https://img.shields.io/github/stars/ivan-pinatti-labs/devcontainer-airlock?logo=Github&style=for-the-badge)](https://github.com/ivan-pinatti-labs/devcontainer-airlock) [![GitHub forks](https://img.shields.io/github/forks/ivan-pinatti-labs/devcontainer-airlock?logo=Github&style=for-the-badge)](https://github.com/ivan-pinatti-labs/devcontainer-airlock/forks) [![CodeRabbit Pull Request Reviews](https://img.shields.io/coderabbit/prs/github/ivan-pinatti-labs/devcontainer-airlock?utm_source=oss&utm_medium=github&utm_campaign=ivan-pinatti-labs%2Fdevcontainer-airlock&labelColor=171717&color=FF570A&label=CodeRabbit+Reviews&style=for-the-badge)](https://coderabbit.ai)

Secure, layered devcontainers for AI coding agents.

Coding agents (Claude Code, Codex) and their editor extensions are powerful and trusted with a lot: a GitHub token, an ssh key, the network, and every hook, test and `npm install` they run. devcontainer-airlock splits that into layers by what each one is trusted with:

A workbench per agent, where you and that agent work. It holds no GitHub token, no ssh key and no other agent's login, and it has no direct network and no container runtime.
L2 containers for hooks, tests, package installs and throwaway binaries. They get the working tree and nothing else: no network, no credentials.
Beside them, a GitHub broker that holds the token and runs an allowlist of gh commands, an ssh-agent that holds the key, and an egres