zaneGittins

Skybreaker — Development skill for Claude Code

Development community

Coding agents that never see your credentials.

How to install Skybreaker

This entry records only its repository, not the path inside it, so there is no exact command to give. Open zaneGittins/skybreaker and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Skybreaker does

Coding agents that never see your credentials. Claude Code, Codex and pi in gVisor sandboxes on your own hardware, behind a credential broker, driven from your phone, browser, terminal or VS Code.

Alternatives in Development

  • Happy Coder — by GrocerPublishAgent - Spawn and control multiple Claude Codes in parallel from your phone or desktop 15.7k ★
  • Microsandbox — Open-source self-hosted MicroVM sandboxes with sub-200ms startup, hardware-level isolation via libkrun 5k ★
  • Zoetrope — Watch a Claude Code session as a live flow graph, in your terminal or your browser 584 ★

README

Skybreaker

Coding agents that never see your credentials.
Claude Code, Codex and pi in sandboxes on your own hardware, every request checked against your policy, driven from your phone, browser, terminal or VS Code.

License

Getting started · Using it · Architecture · Security model · Development


Skybreaker runs Claude Code, Codex and pi in a gVisor sandbox per project on a Linux server you control. Every request an agent makes goes through a built-in broker that holds your credentials, checks the request against your policy and holds anything risky for your approval. You drive it over Tailscale from the web app, your phone, your terminal or VS Code. Your Claude and ChatGPT subscriptions work as they do in the vendors' own apps.

A chat on a desktop: the agent's plan, its tool calls and edits, and the result   Home on a phone: an approval waiting, and chats ordered by what needs you

Features

  • Credentials stay out of reach. The broker adds tokens on the way out, only to the hosts each one is bound to.
  • Deny by default. Each request is allowed, held for your approval or refused, per project. Everything is audited, with a kill switch.