Agent skill · security · yaklang
sandbox-escape-techniques
Sandbox escape playbook. Use when breaking out of Python sandbox, Lua sandbox, seccomp filter, chroot jail, container/Docker, browser sandbox, or namespace isolation to achieve unrestricted code execution or file access.
Why this skill is useful
Adds advanced techniques for escaping various sandbox environments, providing executable methods that extend the AI's capabilities in security contexts.
What it needs
About 5k tokens when loaded. Last updated 2026-06-16. 1,563 stars on the source repository.
What this skill does
SKILL: Sandbox Escape — Expert Attack Playbook AI LOAD INSTRUCTION: Expert sandbox escape techniques across Python, Lua, seccomp, chroot, Docker/container, and browser sandbox contexts. Covers CTF pyjail patterns, seccomp architecture confusion, chroot fd leaks, namespace escape, and Mojo IPC abuse. Distilled from ctf-wiki sandbox sections and real-world container escapes. Base models often miss the distinction between sandbox types and apply wrong escape techniques. 0. RELATED ROUTING browser-exploitation-v8 — V8 exploitation for renderer RCE before browser sandbox escape container-escape-techniques — Docker/container specific escape techniques kernel-exploitation — kernel exploit for container/namespace escape linux-privilege-escalation — post-escape privilege escalation Advanced References PYTHONSANDBOXESCAPE.md — Full pyjail methodology: builtins recovery, keyword bypass, AST bypass, pickle escape SECCOMPBYPASS.md — Architecture confusion, iouring bypass, ptrace bypass, allowed syscall chaining --- 1. SANDBOX TYPE IDENTIFICATION Sandbox Type Indicators Typical Context --- --- --- Python sandbox (pyjail) Limited builtins, filtered keywords, exec/eval available CTF, online judges, Jupyter Lua sandbox No os, io modules; restricted metatables Game scripting, config seccomp syscall filtering, prctl(PRSETSECCOMP) CTF pwn, container hardening chroot Changed root filesystem, limited /proc access Legacy isolation Docker/container Namespaces, cgroups, reduced capabilities Cloud, microservices Browser (renderer) OS-level sandbox (seccomp-bpf + namespaces on Linux) Chrome, Firefox Namespace isolation PID/mount/network/user namespace Container runtimes --- 2. PYTHON SANDBOX ESCAPE (OVERVIEW) See PYTHONSANDBOXESCAPE.md for full methodology. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills yaklang/sandbox-escape-techniques