environments

Instructions for choosing where an agent runs shell and file commands, such as on the local machine, in Docker, or in a hosted sandbox.

In plain words
What is it for?
Use them to configure and switch reusable execution environments without changing the agent definitions.
Why use it?
They clarify the difference between a project workspace and the environment that executes commands.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/evalstate/fast-agent/environments
Clone the repo
git clone --depth 1 https://github.com/evalstate/fast-agent
Per session 18 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 3,950 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00018 $0.03950
Opus 5 $0.00009 $0.01975
Sonnet 5 $0.00004 $0.00790
Haiku 4.5 $0.00002 $0.00395

Measured yesterday against content hash 29d5e0443357, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

environments scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

docs/docs/agents/environments.md · 569 lines

How it starts

The opening of the file, as written. The whole thing — 569 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Execution Environments

Execution environments define where your agent runs shell commands.

Configure reusable environments in your fast-agent config file, then select them by name from the Python API or the CLI.

!!! note Do not confuse an execution environment with your workspace or fast-agent home. The workspace is the project file tree for a run; the home is fast-agent's local config and state root, usually <workspace>/.fast-agent.

By default, fast-agent uses the implicit local environment. To start fast-agent with local shell access simply use fast-agent -x.

You can switch to Docker, a Hugging Face Sandbox, or a custom adapter without changing agent definitions.

result = await harness.shell("pwd")
print(result.stdout, result.stderr, result.exit_code)

Simple Setup

The easiest way to configure environments is to prompt fast-agent:

# container
fast-agent -xx \
-m "configure a docker execution environment (ubuntu) named docker-env " \
" with a read only mount of the current working directory. make it the default" \
--model codexplan
# hf sandbox
fast-agent -xx --url https://huggingface.co/mcp?bouquet=files \
-m "i want to set up an execution environment (hf sandbox) with my most " \
" recent dataset attached" \
--model codexplan

Named environments

Add environments: to <home>/fast-agent.yaml. Relative mount sources resolve against the workspace.

default_environment: ubuntu

environments:
  ubuntu:
    type: docker
    image: ubuntu:24.04
    shell: bash
    cwd: /workspace
    mounts:
      - source: .
        target: /workspace
        mode: rw

  hf-gpu:
    type: huggingface
    image: python:3.12
    flavor: cpu-basic
    cwd: /workspace
    volume_mounts:
      - hf://buckets/username/my-bucket:/workspace:rw

  staging:
    type: custom
    class: mycompany.envs:KubernetesEnvironment
    params:
      namespace: agents-staging

Use the configured name wherever an execution environment is accepted:

Read the full file on GitHub · 569 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 569 lines · 18 tokens per session scan A 29d5e0443357

Subscribe to this mod's changes

environments is an agent published in the GitHub repository evalstate/fast-agent (3,904 stars, last pushed 2d ago), licensed Apache-2.0. It adds 18 tokens to every session and 3,950 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

agentlas-core-engine-meta-agent

Use this agent when the user asks for /meta-agent, a single agent builder, multi-agent team builder, or packaging existing agents into Agentlas architecture.

agentlas-ai/Agentlas-OS · 38 tokens

Explore

Fast read-only codebase & docs exploration. Returns structured findings, never raw file dumps.

BlackBeltTechnology/pi-agent-dashboard · 18 tokens

unittest-generator

Use this agent when you need to create unit tests for your code in unittest.TestCase format, organized in a tests folder with concept-based subfolders. Examples: Context: User has just written a new authentication module and needs comprehensive unit tests. user: 'I just finished writing my user authentication…

Upsonic/Upsonic · 0 tokens

external-system-integration-expert

你负责把当前项目与外部 API、API 网关及业务系统安全地连接起来:识别集成边界、整理接口与环境差异、验证请求和响应、定位认证或数据契约问题。.

agents-universe/agents-universe · 33 tokens

DocScribe

Write docs/ prose for a completed change, in caveman style, per the repo's Documentation Update Protocol. Use after a change lands to update docs/architecture.md, docs/ .md, README, or docs/AGENTS.md — the Rule-6 delegation target (main agent must NOT edit docs/ directly). Self-contained — give it the diff + target…

BlackBeltTechnology/pi-agent-dashboard · 100 tokens

Audit

Deep security + performance audit of a specific diff. Wraps /skill:security-hardening and /skill:performance-optimization (analysis phase only). Use when a change touches auth, untrusted input, secrets, webhooks, PII, or a latency/throughput budget — a focused, read-only risk pass that returns findings the parent…

BlackBeltTechnology/pi-agent-dashboard · 98 tokens