Agent Sandbox — DevOps skill for Claude Code
Docker build for sandboxed agents that run autonomously as default.
How to install Agent Sandbox
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open matuscvengros/claude-sandbox and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Agent Sandbox does
Docker build for sandboxed agents that run autonomously as default.
Alternatives in DevOps
- Docker 71.9k ★
- Skill Claw — OpenClaw instance administration — manage hosts across macOS, Ubuntu/Debian, Docker, OCI, and Proxmox 2.8k ★
- Project Scan — 扫描项目生成配置(CLAUDE.md/restart.sh/ignore/Docker) 1k ★
README
Docker Sandbox for Agents
[](https://github.com/matuscvengros/agent-sandbox/actions/workflows/build.yml) [](https://github.com/matuscvengros/agent-sandbox/actions/workflows/release.yml) [](https://github.com/matuscvengros/agent-sandbox/actions/workflows/nightly.yml) [](https://ghcr.io/matuscvengros/agent-sandbox)
Docker container for running AI coding agents (Claude Code, OpenAI Codex, OpenCode, Pi) autonomously in an isolated sandbox. Based on `python:3.14-bookworm` with Node.js 24 grafted in. Built for macOS hosts using OrbStack where Docker Sandbox isn't available.
Pre-installed tools
- Node.js 24 (LTS) + npm
- Python 3.14 + pip + uv, pytest, ruff, pyright, pint, engunits, scipy, numpy, pandas, matplotlib, requests, httpx, pydantic
- Rust stable via rustup — rustc, cargo, rustfmt, clippy; proxies are also linked into
/usr/local/binfor tool runners that use a reduced PATH - C/C++ (gcc, g++, make, cmake, build-essential)
- Git, GitHub CLI (
gh), curl, wget, ripgrep, fd-find, jq, openssh-client - Starship prompt (Bracketed Segments preset)
- Firecrawl CLI (
firecrawl-cli) - AI coding agents (all installed as npm globals under the
agentuser):- Claude Code (
@anthropic-ai/claude-code) — with official plugins, see Plugins - OpenAI Codex (
@openai/codex) - SST opencode (
opencode-ai) - Pi Coding Agent (
@mariozechner/pi-coding-agent) — minimal terminal coding harness supporting 15+ LLMs
- Claude Code (
Plugins
The container ships with 24+ plugins from the [official marketplace](https://github.com/anthropics/claude-plugins-official):
Related Skills
Jvsl.Env.Agents.Code Server
A code-server dev container for agent work: the Claude Code CLI sandboxed by default with ai-jail, opt-in ai-m
Porta
Sandboxed runtime for AI agents. WASM isolation + OS-level sandbox. Run Claude Code, Python, or any command wi
Sandbox Shell
macOS Seatbelt sandbox CLI for developers. Protect credentials (SSH, AWS, GPG) from malicious npm packages, su
Sandy
Sandboxed TypeScript runtime for AI coding agents to query AWS — full SDK access with in-sandbox aggregation,
Deploy To Docker
Build Docker image and start/redeploy the MCP Task Orchestrator container, reusing the last-used config by def
Architecture Compose Resource Limit Env Substitution
Planning pattern for exposing hard-coded docker-compose deploy.resources limits/reservations (cpus, memory) as
Related Agents
Tsk - AI Agent Task Manager And Sandbox
by dtormoen - A Rust CLI tool that lets you delegate development tasks to AI agents running in sandboxed Docke
Docker Sandbox
Isolated autonomous scanning agent — runs in a temporary worktree with restricted Bash access. Requires ROE au
Interactive Troubleshooter
Automated diagnostic agent that runs checks, identifies issues, and provides targeted fixes for Docker sandbox