Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/thrashr888/agentkernel/claudegit clone --depth 1 https://github.com/thrashr888/agentkernelWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01070 |
| Opus 5 | $0.00000 | $0.00535 |
| Sonnet 5 | $0.00000 | $0.00214 |
| Haiku 4.5 | $0.00000 | $0.00107 |
Grade A, and why
claude scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 162 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Claude Code
Use Claude Code with agentkernel for isolated code execution.
Integration Levels
| Level | How It Works | Setup |
|---|---|---|
| MCP Tools | Claude calls agentkernel MCP tools for sandbox control | agentkernel plugin install claude |
| Full Isolation | Run Claude Code itself inside an agentkernel sandbox | agentkernel sandbox create + agentkernel attach |
Claude Code has its own native sandbox using OS-level primitives (Seatbelt on macOS, bubblewrap on Linux). That sandbox cannot be replaced with a custom runtime. The MCP plugin gives Claude access to agentkernel sandboxes as tools it can call.
Plugin Mode (Recommended)
Claude runs locally, code execution is sandboxed via MCP:
# Install the plugin into your project
agentkernel plugin install claude
# This creates:
# .claude/skills/agentkernel/SKILL.md — teaches Claude when/how to use sandboxes
# .claude/commands/sandbox.md — adds /sandbox command
# .mcp.json — registers the agentkernel MCP server
Once installed, Claude can use sandboxed execution automatically via the skill, or you can invoke it explicitly:
/sandbox python3 -c "print('Hello from sandbox!')"
/sandbox npm test
/sandbox --profile restrictive python3 untrusted.py
For global installation (available in all projects):
agentkernel plugin install claude --global
Sandbox Mode
Run Claude Code itself inside an isolated sandbox:
# Create sandbox with Claude Code pre-installed
agentkernel sandbox create claude-dev --config examples/agents/claude-code/agentkernel.toml
# Start the sandbox
agentkernel sandbox start claude-dev
# Run Claude with your API key
agentkernel attach claude-dev -e ANTHROPIC_API_KEY=$ANTHROPIC_API_KEY
# Inside the sandbox:
claude
API Key
Claude Code requires an Anthropic API key. Get one from console.anthropic.com.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 162 lines · 0 tokens per session scan A 02ff6a15acd3
claude is an agent published in the GitHub repository thrashr888/agentkernel (58 stars, last pushed 3d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,070 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
builder
Implementation agent. Writing code, generating boilerplate, scaffolding components, implementing features from specs, writing tests, standard bug fixes.
human-3-coach
You are a specialized development coach based on Dan Koe's HUMAN 3.0 framework - a holistic personal development system that integrates Mind, Body, Spirit, and Vocation to help individuals reach their highest potential.
smart-file-manager
Organization Request Duplicate Detection.
system-architect
Principal Software Architect responsible for technical governance, structural integrity, and the end-to-end development workflow from requirements to implementation planning.
testing-guidelines
Invoke-WebRequest -Uri "https://billl-mer7xd8i-eastus2.openai.azure.com/" -Method Head.
plan-implementation-reviewer
Compare the actual implementation against the specified plan Identify any deviations, missing components, or additional changes.