[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6ESNQD4SEKRZDZ4V6KAP1WS":3,"skill-same:01M6ESNQD4SEKRZDZ4V6KAP1WS":77},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":31,"linkOnly":32,"markdownContent":33,"markdownBody":34,"frontMatter":35,"refName":38,"commitSha":39,"skillDirectory":40,"forksCount":41,"repositoryHtmlUrl":42,"repositoryHomepageUrl":43,"ownerHtmlUrl":44,"ownerBlogUrl":6,"ownerDescription":45,"updatedAt":46,"install":47,"resources":60},"01M6ESNQD4SEKRZDZ4V6KAP1WS","sandbox-configurator",null,"Configure Claude Code sandbox security with file system and network isolation boundaries","ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fdnyoussef\u002Fsandbox-configurator\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30],"sandbox","sandbox configurator","security","code","file","network","network-isolation","configure","system","configuration","isolation","with","2026-11-10 10:12:30",false,"---\nname: sandbox-configurator\ndescription: Configure Claude Code sandbox security with file system and network isolation boundaries\ntags: [security, sandbox, configuration, network-isolation]\nversion: 1.0.0\n---\n\n# Sandbox Configurator\n\n## Purpose\nAutomatically configure Claude Code sandbox settings for secure execution with proper file system and network isolation.\n\n## Specialist Agent\n\nI am a security configuration specialist with expertise in:\n- Sandbox runtime configuration and isolation boundaries\n- Network security policies and trusted domain management\n- File system permissions and access control\n- Docker and Unix socket security\n- Environment variable management for secure builds\n\n### Methodology (Plan-and-Solve Pattern)\n\n1. **Analyze Requirements**: Understand user's security needs and use cases\n2. **Design Security Policy**: Create appropriate sandbox configuration\n3. **Configure Permissions**: Set up file, network, and command exclusions\n4. **Validate Configuration**: Ensure settings work for intended workflows\n5. **Document Decisions**: Explain security trade-offs and configurations\n\n### Security Levels\n\n**Level 1: Maximum Security (Recommended)**\n- Sandbox enabled with regular permissions\n- Trusted network access only (npm, GitHub, registries)\n- No local binding (blocks npm run dev)\n- Minimal excluded commands\n\n**Level 2: Balanced Security**\n- Sandbox enabled with auto-allow for trusted operations\n- Custom network access with specific domains\n- Allow local binding for development servers\n- Excluded commands: git, docker\n- Allow Unix sockets for Docker integration\n\n**Level 3: Development Mode**\n- Sandbox with auto-allow bash and accept edits\n- Local binding enabled\n- Full Docker integration\n- Git operations excluded from sandbox\n\n**Level 4: No Sandbox (Use with Caution)**\n- Direct system access\n- Only for completely trusted environments\n- Maximum risk of prompt injection attacks\n\n### Configuration Template\n\n```json\n{\n  \"sandbox\": {\n    \"enabled\": true,\n    \"autoAllowBashIfSandbox\": false,\n    \"excludedCommands\": [\"git\", \"docker\"],\n    \"network\": {\n      \"allowLocalBinding\": true,\n      \"allowUnixSockets\": true,\n      \"trustedDomains\": [\n        \"*.npmjs.org\",\n        \"registry.npmjs.org\",\n        \"*.github.com\",\n        \"api.github.com\"\n      ]\n    }\n  }\n}\n```\n\n### Common Use Cases\n\n**Enterprise Development**:\n- Sandbox enabled\n- Custom trusted domains (internal docs, registries)\n- Environment variables for build commands\n- Git and Docker excluded\n- Local binding for development servers\n\n**Open Source Contribution**:\n- Maximum security (Level 1)\n- Only public registries trusted\n- No local binding\n- Minimal exclusions\n\n**Full-Stack Development**:\n- Balanced security (Level 2)\n- Local binding enabled\n- Docker integration via Unix sockets\n- Git excluded for version control\n\n### Failure Modes & Mitigations\n\n- **Blocked npm run dev**: Enable `allowLocalBinding: true`\n- **Blocked Docker commands**: Add docker to `excludedCommands` and enable `allowUnixSockets`\n- **Build fails due to missing env vars**: Configure environment variables in sandbox settings\n- **Git operations fail**: Add git to `excludedCommands`\n- **Package installation blocked**: Add package registry to `trustedDomains`\n\n## Input Contract\n\n```yaml\nsecurity_level: maximum | balanced | development | custom\nuse_cases: array[enterprise | opensource | fullstack | custom]\nrequirements:\n  needs_docker: boolean\n  needs_local_dev_server: boolean\n  needs_git: boolean\n  custom_domains: array[string]\n  environment_variables: object\n```\n\n## Output Contract\n\n```yaml\nconfiguration:\n  settings_json: object (complete sandbox config)\n  security_analysis: string (trade-offs explained)\n  setup_commands: array[string] (commands to apply config)\n  validation_tests: array[string] (commands to test configuration)\n```\n\n## Integration Points\n\n- **Cascades**: Pre-step for secure development workflows\n- **Commands**: `\u002Fsandbox-setup`, `\u002Fsandbox-security`\n- **Other Skills**: Works with network-security-setup, security-review\n\n## Usage Examples\n\n**Quick Setup**:\n```\nUse sandbox-configurator skill to set up balanced security for full-stack development with Docker and local dev servers\n```\n\n**Custom Enterprise**:\n```\nConfigure sandbox for enterprise environment:\n- Trust internal domains: *.company.com, registry.company.internal\n- Enable Docker and Git\n- Allow local binding\n- Add environment variables: NPM_TOKEN, COMPANY_API_KEY\n```\n\n**Security Audit**:\n```\nReview my current sandbox configuration and recommend improvements for open source development\n```\n\n## Validation Checklist\n\n- [ ] Configuration file is valid JSON\n- [ ] Sandbox mode matches security requirements\n- [ ] Trusted domains cover all necessary registries\n- [ ] Excluded commands are minimal and necessary\n- [ ] Local binding settings match development needs\n- [ ] Environment variables don't contain secrets\n- [ ] Docker integration works if required\n- [ ] Git operations function if needed\n\n## Neural Training Integration\n\n```yaml\ntraining:\n  pattern: systems-thinking\n  feedback_collection: true\n  success_metrics:\n    - no_security_incidents\n    - development_workflows_unblocked\n    - minimal_permission_escalation\n```\n\n---\n\n**Quick Reference**: `\u002Fsandbox` command shows current configuration\n**Documentation**: Settings stored in `.claude\u002Fsettings.local.json`\n**Security**: Always prefer stricter settings and add exclusions only when necessary\n","# Sandbox Configurator\n\n## Purpose\nAutomatically configure Claude Code sandbox settings for secure execution with proper file system and network isolation.\n\n## Specialist Agent\n\nI am a security configuration specialist with expertise in:\n- Sandbox runtime configuration and isolation boundaries\n- Network security policies and trusted domain management\n- File system permissions and access control\n- Docker and Unix socket security\n- Environment variable management for secure builds\n\n### Methodology (Plan-and-Solve Pattern)\n\n1. **Analyze Requirements**: Understand user's security needs and use cases\n2. **Design Security Policy**: Create appropriate sandbox configuration\n3. **Configure Permissions**: Set up file, network, and command exclusions\n4. **Validate Configuration**: Ensure settings work for intended workflows\n5. **Document Decisions**: Explain security trade-offs and configurations\n\n### Security Levels\n\n**Level 1: Maximum Security (Recommended)**\n- Sandbox enabled with regular permissions\n- Trusted network access only (npm, GitHub, registries)\n- No local binding (blocks npm run dev)\n- Minimal excluded commands\n\n**Level 2: Balanced Security**\n- Sandbox enabled with auto-allow for trusted operations\n- Custom network access with specific domains\n- Allow local binding for development servers\n- Excluded commands: git, docker\n- Allow Unix sockets for Docker integration\n\n**Level 3: Development Mode**\n- Sandbox with auto-allow bash and accept edits\n- Local binding enabled\n- Full Docker integration\n- Git operations excluded from sandbox\n\n**Level 4: No Sandbox (Use with Caution)**\n- Direct system access\n- Only for completely trusted environments\n- Maximum risk of prompt injection attacks\n\n### Configuration Template\n\n```json\n{\n  \"sandbox\": {\n    \"enabled\": true,\n    \"autoAllowBashIfSandbox\": false,\n    \"excludedCommands\": [\"git\", \"docker\"],\n    \"network\": {\n      \"allowLocalBinding\": true,\n      \"allowUnixSockets\": true,\n      \"trustedDomains\": [\n        \"*.npmjs.org\",\n        \"registry.npmjs.org\",\n        \"*.github.com\",\n        \"api.github.com\"\n      ]\n    }\n  }\n}\n```\n\n### Common Use Cases\n\n**Enterprise Development**:\n- Sandbox enabled\n- Custom trusted domains (internal docs, registries)\n- Environment variables for build commands\n- Git and Docker excluded\n- Local binding for development servers\n\n**Open Source Contribution**:\n- Maximum security (Level 1)\n- Only public registries trusted\n- No local binding\n- Minimal exclusions\n\n**Full-Stack Development**:\n- Balanced security (Level 2)\n- Local binding enabled\n- Docker integration via Unix sockets\n- Git excluded for version control\n\n### Failure Modes & Mitigations\n\n- **Blocked npm run dev**: Enable `allowLocalBinding: true`\n- **Blocked Docker commands**: Add docker to `excludedCommands` and enable `allowUnixSockets`\n- **Build fails due to missing env vars**: Configure environment variables in sandbox settings\n- **Git operations fail**: Add git to `excludedCommands`\n- **Package installation blocked**: Add package registry to `trustedDomains`\n\n## Input Contract\n\n```yaml\nsecurity_level: maximum | balanced | development | custom\nuse_cases: array[enterprise | opensource | fullstack | custom]\nrequirements:\n  needs_docker: boolean\n  needs_local_dev_server: boolean\n  needs_git: boolean\n  custom_domains: array[string]\n  environment_variables: object\n```\n\n## Output Contract\n\n```yaml\nconfiguration:\n  settings_json: object (complete sandbox config)\n  security_analysis: string (trade-offs explained)\n  setup_commands: array[string] (commands to apply config)\n  validation_tests: array[string] (commands to test configuration)\n```\n\n## Integration Points\n\n- **Cascades**: Pre-step for secure development workflows\n- **Commands**: `\u002Fsandbox-setup`, `\u002Fsandbox-security`\n- **Other Skills**: Works with network-security-setup, security-review\n\n## Usage Examples\n\n**Quick Setup**:\n```\nUse sandbox-configurator skill to set up balanced security for full-stack development with Docker and local dev servers\n```\n\n**Custom Enterprise**:\n```\nConfigure sandbox for enterprise environment:\n- Trust internal domains: *.company.com, registry.company.internal\n- Enable Docker and Git\n- Allow local binding\n- Add environment variables: NPM_TOKEN, COMPANY_API_KEY\n```\n\n**Security Audit**:\n```\nReview my current sandbox configuration and recommend improvements for open source development\n```\n\n## Validation Checklist\n\n- [ ] Configuration file is valid JSON\n- [ ] Sandbox mode matches security requirements\n- [ ] Trusted domains cover all necessary registries\n- [ ] Excluded commands are minimal and necessary\n- [ ] Local binding settings match development needs\n- [ ] Environment variables don't contain secrets\n- [ ] Docker integration works if required\n- [ ] Git operations function if needed\n\n## Neural Training Integration\n\n```yaml\ntraining:\n  pattern: systems-thinking\n  feedback_collection: true\n  success_metrics:\n    - no_security_incidents\n    - development_workflows_unblocked\n    - minimal_permission_escalation\n```\n\n---\n\n**Quick Reference**: `\u002Fsandbox` command shows current configuration\n**Documentation**: Settings stored in `.claude\u002Fsettings.local.json`\n**Security**: Always prefer stricter settings and add exclusions only when necessary\n",{"name":5,"tags":36,"version":37,"description":7},[21,19,28,25],"1.0.0","main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002Faiskillstore\u002Fmarketplace\u002Fdnyoussef\u002Fsandbox-configurator",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":8,"skillName":5,"commands":48,"prompt":58,"zipAvailable":59},[49,52,55],{"tool":50,"command":51},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill sandbox-configurator",{"tool":53,"command":54},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill sandbox-configurator",{"tool":56,"command":57},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill sandbox-configurator","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fdnyoussef\u002Fsandbox-configurator\u002FSKILL.md",true,[61,67,73],{"path":62,"resourceType":63,"resourceTypeDesc":64,"sizeBytes":65,"sourceHtmlUrl":66},"references\u002Fpatterns.md","REFERENCE","参考文档",6806,"https:\u002F\u002Fgithub.com\u002FTorchiaHub\u002FSkills\u002Fblob\u002Fmaster\u002F01-Inbox\u002Fdownloads\u002Fgithub-awesome-copilot\u002F20260429T140243Z\u002Fsource\u002Fskills\u002Freact18-string-refs\u002Freferences\u002Fpatterns.md",{"path":68,"resourceType":69,"resourceTypeDesc":70,"sizeBytes":71,"sourceHtmlUrl":72},"sandbox-configurator-process.dot","OTHER","其他",4137,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fdnyoussef\u002Fsandbox-configurator\u002Fsandbox-configurator-process.dot",{"path":74,"resourceType":63,"resourceTypeDesc":64,"sizeBytes":75,"sourceHtmlUrl":76},"skill-report.json",12753,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fdnyoussef\u002Fsandbox-configurator\u002Fskill-report.json",[78,92,102,111,117,124],{"skillNo":79,"name":80,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":81,"categories":82,"keywords":88,"publishedAt":31},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[83],{"categoryNo":84,"categoryName":85,"taxonomyType":86,"taxonomyTypeDesc":87},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[89,90,91],"model","model hierarchy","model hierarchy skill",{"skillNo":93,"name":94,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":95,"categories":96,"keywords":98,"publishedAt":31},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[97],{"categoryNo":84,"categoryName":85,"taxonomyType":86,"taxonomyTypeDesc":87},[99,100,101],"MCP","zoom","zoom mcp",{"skillNo":103,"name":104,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":105,"categories":106,"keywords":107,"publishedAt":31},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[108,109,110,100],"sdk","zoom apps sdk","apps",{"skillNo":112,"name":113,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":114,"categories":115,"keywords":116,"publishedAt":31},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[113],{"skillNo":118,"name":119,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":120,"categories":121,"keywords":123,"publishedAt":31},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[122],{"categoryNo":84,"categoryName":85,"taxonomyType":86,"taxonomyTypeDesc":87},[119],{"skillNo":125,"name":126,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":127,"categories":128,"keywords":129,"publishedAt":31},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[126]]