No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by rivet-dev · Codex Skill · ★ 1.6k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is sandbox-agent safe to install? View the security audit →
Run Coding Agents in Sandboxes. Control Them Over HTTP. A server that runs inside your sandbox. Your app connects remotely to control Claude Code, Codex, OpenCode, Cursor, Amp, or Pi — streaming events, handling permissions, managing sessions. Documentation — API Reference — Discord Experimental: Gigacode — use OpenCode's TUI with any coding agent. Why Sandbox Agent? Running coding agents remotely is hard. Existing SDKs assume local execution, SSH breaks TTY handling and streaming, and every agent has a different API. Building from scratch means reimplementing everything for each coding agent. Sandbox Agent solves three problems: Coding agents need sandboxes — You can't let AI execute arbitrary code on your production servers. Coding agents need isolated environments, but existing SDKs assume local execution. Sandbox Agent is a server that runs inside the sandbox and exposes HTTP/SSE. Every coding agent is different — Claude Code, Codex, OpenCode, Cursor, Amp, and Pi each have proprietary APIs, event formats, and behaviors. Swapping agents means rewriting your integration.
| Stars | 1,569 |
| Forks | 125 |
| Language | TypeScript |
| Category | Codex Skill |
| License | Apache-2.0 |
| Quality Score | 67.8426050475659/100 |
| Open Issues | 82 |
| Last Updated | 2026-06-19 |
| Created | 2026-01-25 |
| Platforms | claude-code, codex, node |
| Est. Tokens | ~16k |
These tools work well together with sandbox-agent for enhanced workflows:
Looking for a sandbox-agent alternative? If you're comparing sandbox-agent with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
The world's first open-source AI-native vector design tool and the first to feature concurrent Agent Teams. De
⚡️ Open-source AI Gateway — Use any SDK to call 100+ LLMs. Built-in failover, load balancing, cost control & e
AI writes code. This automates everything else · 24 plugins · 49 agents · 44 skills · for Claude Code, OpenCod
A personal context store for AI agents and assistants—reuse your existing coding agent CLI (Codex/Claude/OpenC
Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops t
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plug
Explore other popular codex skill tools:
sandbox-agent is Run Coding Agents in Sandboxes. Control Them Over HTTP. Supports Claude Code, Codex, OpenCode, and Amp.. It is categorized as a Codex Skill with 1.6k GitHub stars.
sandbox-agent is primarily written in TypeScript. It covers topics such as agent, ai, amp.
You can find installation instructions and usage details in the sandbox-agent GitHub repository at github.com/rivet-dev/sandbox-agent. The project has 1.6k stars and 125 forks, indicating an active community.
sandbox-agent is released under the Apache-2.0 license, making it free to use and modify according to the license terms.
The top alternatives to sandbox-agent on Agent Skills Hub include openpencil, axonhub, agentsys. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: