Agent skill · security · aradotso
zeroboot-vm-sandbox
Sub-millisecond VM sandboxes for AI agents using copy-on-write KVM forking via Zeroboot
Why this skill is useful
Adds executable scripts and a powerful API for running untrusted code in isolated VM sandboxes, which the AI cannot generate on its own.
What it needs
Requires @zeroboot/sdk, zeroboot installed locally. Requires zeroboot account access. About 4k tokens when loaded. Last updated 2026-07-09. 70 stars on the source repository.
What this skill does
Zeroboot VM Sandbox Skill by ara.so — Daily 2026 Skills collection. Zeroboot provides sub-millisecond KVM virtual machine sandboxes for AI agents using copy-on-write forking. Each sandbox is a real hardware-isolated VM (via Firecracker + KVM), not a container. A template VM is snapshotted once, then forked in ~0.8ms per execution using mmap(MAPPRIVATE) CoW semantics. How It Works 1. Template: Firecracker boots once, pre-loads your runtime, snapshots memory + CPU state 2. Fork (~0.8ms): New KVM VM maps snapshot memory as CoW, restores CPU state 3. Isolation: Each fork is a separate KVM VM with hardware-enforced memory isolation Installation Python SDK Node/TypeScript SDK Authentication Set your API key as an environment variable: Never hardcode keys in source files. Quick Start REST API (cURL) Python TypeScript / Node.js Common Patterns AI Agent Code Execution Loop (Python) Concurrent Sandbox Execution (Python) TypeScript: Agent Tool Integration REST API with fetch (TypeScript) Health Check API Reference POST /v1/exec Execute code in a fresh sandbox fork. Request: Headers: Response: Performance Characteristics Metric Value --- --- Spawn latency p50 ~0.79ms Spawn latency p99 ~1.74ms Memory per sandbox ~265KB Fork + exec Python ~8ms 1000 concurrent forks ~815ms Each sandbox is a real KVM VM — not a container or process jail Memory isolation is hardware-enforced (not software) CoW means only pages written by your code consume extra RAM Self-Hosting / Deployment See docs/DEPLOYMENT.md in the repo. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/zeroboot-vm-sandbox