sandbox

sandbox is a skill for Claude Code, Codex from alsk1992/CloddsBot. It costs 13 tokens per session (324 once invoked), scanned A, original, MIT.

A visual HTML canvas that renders web content in a live preview. HTML structures the page, while CSS and JavaScript control its appearance and behavior.

In plain words
What is it for?
Use it to start a local preview server, push HTML to the canvas, view its status, capture screenshots, and reset the preview.
Why use it?
It lets an agent display and inspect changing web content without manually refreshing a separate page.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to start a local preview server, push HTML to the canvas, view its status, capture screenshots, and reset the preview.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/alsk1992/cloddsbot/sandbox
About the project

CloddsBot is a self-hosted AI trading terminal that lets users interact through conversation while trading prediction markets, cryptocurrencies, and futures. It scans markets, executes trades, manages risk, and supports portfolio activities across the exchanges and blockchains listed by the project. The catalogue contains skills for extending or guiding the trading agent.

alsk1992/CloddsBot · 3,003 stars · on GitHub · cloddsbot.com

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add alsk1992/CloddsBot --skill sandbox
Clone the repo
git clone --depth 1 https://github.com/alsk1992/CloddsBot

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sandbox

README.md
[![agentmods](https://agentmods.dev/badge/skills/alsk1992/cloddsbot/sandbox/github.svg)](https://agentmods.dev/skills/alsk1992/cloddsbot/sandbox)
Your own site
<a href="https://agentmods.dev/skills/alsk1992/cloddsbot/sandbox"><img src="https://agentmods.dev/badge/skills/alsk1992/cloddsbot/sandbox/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for sandbox

Your own site · 80×15
<a href="https://agentmods.dev/skills/alsk1992/cloddsbot/sandbox"><img src="https://agentmods.dev/badge/skills/alsk1992/cloddsbot/sandbox.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 13 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 324 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00013 $0.00324
Opus 5.5 $0.00005 $0.00130
Sonnet 5.5 $0.00003 $0.00065
Haiku 4.5 $0.00001 $0.00032

Measured 1mo ago against content hash 3b580d9e295c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

sandbox scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 1 executable file (index.ts), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

src/skills/bundled/sandbox/SKILL.md · 47 lines

What it actually says

Sandbox - Visual Canvas

Push HTML content to a live-updating canvas server for visual previews, dashboards, and agent-driven UI.

Commands

/sandbox start        - Start the canvas server (returns URL)
/sandbox push <html>  - Push HTML content to the canvas
/sandbox reset        - Reset canvas to blank state
/sandbox screenshot   - Take a screenshot of the current canvas
/sandbox status       - Show canvas server status and settings

Environment Variables

Variable Description
CANVAS_ALLOW_JS_EVAL Enable JavaScript evaluation in canvas (default: false)
ALLOW_UNSAFE_SANDBOX Enable unsafe sandbox mode (default: false)

Examples

/sandbox start
/sandbox push <h1>Hello World</h1><p>Live preview</p>
/sandbox screenshot
/sandbox status
/sandbox reset

How It Works

  1. /sandbox start launches a local HTTP server that serves the canvas page
  2. /sandbox push <html> sends HTML to the canvas, rendered in real time
  3. /sandbox screenshot captures the current canvas state as an image
  4. /sandbox reset clears all HTML, CSS, and JS from the canvas
  5. /sandbox status shows whether the server is running, the URL, and content sizes
Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 47 lines · 13 tokens per session scan A 3b580d9e295c

Subscribe to this mod's changes

sandbox is a skill published in the GitHub repository alsk1992/CloddsBot (3,003 stars, last pushed 22d ago), licensed MIT. It adds 13 tokens to every session and 324 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

perp-cli

Multi-DEX perpetual futures trading via the perp-cli command-line tool. Use when user asks to: trade perps, check funding rates, scan/execute arbitrage (perp-perp or spot-perp), run delta-neutral strategies, bridge USDC across chains, manage positions/orders/leverage, deposit/withdraw, hedge spot+perp, trade HIP-3…

hypurrquant/perp-cli · 245 tokens

aomi-transact

Build natural-language crypto agents, web3 assistants, and trading bots that read and write EVM chain state. Aomi turns prompts ("swap 1 ETH for USDC", "open a 3x GMX long", "bet $100 on Polymarket") into wallet-signed transactions on Ethereum, Base, Arbitrum, Optimism, Polygon, Linea — non-custodial, fork-simulated.…

aomi-labs/skills · 210 tokens

philidor-mcp

DeFi vault risk analytics MCP server: search 1000+ vaults, compare risk scores, list lending markets, underwrite loop venues, analyze protocols, run due diligence. Connect via Streamable HTTP — no API key needed. Use when setting up or using the Philidor MCP server for DeFi vault analysis, risk scoring, market…

Philidor-Labs/philidor-mcp · 86 tokens

aomi-transact

Build natural-language crypto agents, web3 assistants, and trading bots that read and write EVM chain state. Aomi turns prompts ("swap 1 ETH for USDC", "open a 3x GMX long", "bet $100 on Polymarket") into wallet-signed transactions on Ethereum, Base, Arbitrum, Optimism, Polygon, Linea — non-custodial, fork-simulated.…

Bilal140202/the-lord-of-the-skills · 211 tokens

philidor-api-handoff

Use this when the user needs Philidor data the free MCP server does not expose (baskets, oracle vectors, enriched or RWA breakdowns, bulk scores, the event stream, or Risk Graph). Point them at the Philidor API docs. Do not invent prices or plan names.

Philidor-Labs/philidor-mcp · 64 tokens

market-incident-monitoring

Use this when the user wants lending-market monitoring, a market overview, recent market events, protocol incident history, or which vaults had a critical incident. Cite only identifiers and figures the Philidor tools return.

Philidor-Labs/philidor-mcp · 48 tokens