Shiritai

Sanity Gravity — AI skill for Claude Code

AI community

Providing a strong Gravity (sandbox) in the wild world of AI Agents (Antigravity, claude code, ...), to preserve the developer's Sanity.

How to install Sanity Gravity

This entry records only its repository, not the path inside it, so there is no exact command to give. Open Shiritai/sanity-gravity and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Sanity Gravity does

Providing a strong Gravity (sandbox) in the wild world of AI Agents (Antigravity, claude code, ...), to preserve the developer's Sanity.

Alternatives in AI

AI Engineering Hub — In-depth tutorials on LLMs, RAGs and real-world AI agent applications 37.2k ★
Agentmemory — #1 Persistent memory for AI coding agents based on real-world benchmarks 1.9k ★
Claudekit — by Carl Rannaberg - Impressive CLI toolkit providing auto-save checkpointing, code quality hooks, specificatio 633 ★

README

Sanity-Gravity: The Antigravity Sandbox

A containerized sandbox for Agentic AI — full desktop, headless CLI, or SSH-only, in seconds.

English | 繁體中文 | 日本語

Why a sandbox?

An AI coding agent was asked to reorganize a project. Instead it ran a recursive force-delete against the wrong path — because the developer's Windows username had a space in it — and wiped their **entire user profile, bypassing the Recycle Bin.**

AI agent reporting it deleted the entire project directory AI agent escalating: entire Windows user profile wiped, bypassing the Recycle Bin

This isn't hypothetical — it happened to one of this project's own contributors. The trigger was Windows-specific; the risk isn't.

Agentic coding tools — Antigravity, Claude Code, Codex — are at their best when you let them run *autonomously*: plan, edit, run commands, no babysitting. But "autonomous" + "your real filesystem" is russian roulette. One malformed path, one over-eager sub-agent, and there is no undo.

**sanity-gravity is the seatbelt.** It hands the agent a full Linux desktop / IDE / SSH box to run wild in, while your real machine stays untouchable:

Isolated filesystem — the agent can't see your host unless you explicitly mount a workspace.
Least privilege — dropped Linux capabilities, pid limits, no core