Agent skill · vasilyu1983
ai-coding-agents-execution-sandbox
Designs execution sandboxes for coding agents. Use when modeling process isolation, filesystem policy, network controls, workspace mounts, or destructive-command boundaries.
What it needs
About 8k tokens when loaded.
What this skill does
AI Coding Agents Execution Sandbox Use this skill to design or review the execution substrate for a coding-agent runtime: process isolation, filesystem mounts, network policy, workspace boundaries, environment exposure, and destructive-command controls. This skill covers where and how code runs. It complements permission routing by defining the actual isolation and policy envelope around execution. For remote execution — managed sandbox providers, ephemeral cloud workspaces per task, hosted agent runtimes, egress policy across a network boundary, and cost per task — use ai-coding-agents-cloud-sandboxes instead. ASCII Flow Quick Reference Question Read Outcome ---------- ------ --------- How should process, filesystem, and workspace isolation work? references/sandbox-process-and-filesystem-model.md Execution modes, mounts, working directories, and write boundaries How should network, approvals, and destructive actions be controlled? references/network-approval-and-destructive-action-guards.md Outbound policy, command classes, escalation triggers, and guardrails What sandbox mode names and backend split should runtime builders copy from Codex? references/openai-codex-sandbox-guardrails-may-2026.md read-only/workspace-write/danger-full-access modes, platform backends, fail-closed policy translation, security telemetry What does a shipping Bash sandbox actually enforce, and where does its scope end? references/claude-code-bash-sandbox-mechanics.md Read/write asymmetry, credential deny-vs-mask, TLS-blind allowlists, tool-scope limits, known compatibility failures What is the canonical policy format for interpreter allowlists and filesystem/network rules? references/sandbox-policy-format.md Runtime-agnostic policy fields, common traps, and translation notes How do I verify a sandbox actually holds before shipping it? references/escape-path-test-matrix.md Symlink, interpreter-wrapper, env-injection, and package-manager escape tests with pass criteria When To Use Design exe …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills vasilyu1983/ai-coding-agents-execution-sandbox