Agent Sandbox is a Kubernetes extension for managing isolated, stateful workloads that run as single long-lived containers with stable identities and persistent storage. It is intended for AI agent runtimes, reinforcement-learning workloads, and other applications that do not fit ordinary stateless deployments. Its catalogue skills and instructions support operating these sandbox workloads.
Borrowing it
Nothing to install: this file belongs to kubernetes-sigs/agent-sandbox. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/kubernetes-sigs/agent-sandbox/main/.agents/skills/bump-go-version/SKILL.mdgit clone --depth 1 https://github.com/kubernetes-sigs/agent-sandboxWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kubernetes-sigs/agent-sandbox/bump-go-version)<a href="https://agentmods.dev/skills/kubernetes-sigs/agent-sandbox/bump-go-version"><img src="https://agentmods.dev/badge/skills/kubernetes-sigs/agent-sandbox/bump-go-version/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kubernetes-sigs/agent-sandbox/bump-go-version"><img src="https://agentmods.dev/badge/skills/kubernetes-sigs/agent-sandbox/bump-go-version.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.01067 |
| Opus 5 | $0.00013 | $0.00534 |
| Sonnet 5 | $0.00005 | $0.00213 |
| Haiku 4.5 | $0.00003 | $0.00107 |
Grade A, and why
bump-go-version scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 61 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Bump Go Version Skill
Purpose
This skill guides AI agents to update the Go version used throughout the agent-sandbox repository to the latest stable Go release. It ensures consistency across Go module definitions (go.mod, tools.mod, toolchain) and container image base layers (Dockerfile).
Instructions
-
Determine the Latest Go Version:
- Run the helper script provided with this skill to fetch the latest stable Go release version string (e.g.,
go1.26.3). Execute this from the repository root:./.agents/skills/bump-go-version/scripts/get-latest-go - Note the exact version strings needed:
- For
go mod edit -go, use the numeric format1.x(e.g.,1.26). This is the language version and should not specify a patch version. - For
go mod edit -toolchain, use thego1.x.yformat (e.g.,go1.26.3). - For
Dockerfiles, identify the corresponding officialgolangimage tag (e.g.,golang:1.26.3).
- For
- Run the helper script provided with this skill to fetch the latest stable Go release version string (e.g.,
-
Locate Target Files and Context:
- Run the helper script provided with this skill to locate all relevant files and inspect their current
FROM,go, andtoolchainlines. Execute this from the repository root:./.agents/skills/bump-go-version/scripts/find-files - The script will output the list of all
go.mod,tools.mod, andDockerfile*files in the repository along with their current version directives. (Note:site/go.modis automatically excluded by the script).
- Run the helper script provided with this skill to locate all relevant files and inspect their current
-
Update Go Module Directives:
- By default, only update the
toolchaindirective in eachgo.modandtools.modfile usinggo mod edit. Do not update thegolanguage version directive by default, as bumping the minimum language version forces that requirement onto all downstream consumers of our modules. - Example (Default Workflow):
go mod edit -toolchain=go1.26.3 go.mod go mod edit -toolchain=go1.26.3 tools.mod - Optional Language Version Bump: If the user explicitly requests bumping the Go language version (e.g., when adopting new language features), update the
godirective usinggo mod edit -go=1.x(specifying only the major/minor version, e.g.,1.26, without a patch version).go mod edit -go=1.26 go.mod - CRITICAL NOTE: Do NOT update or modify
site/go.mod.site/go.modis a Hugo theme configuration file, not a Go code module, and modifying it or running Go tools against it will break the documentation build.
- By default, only update the
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 61 lines · 25 tokens per session scan A 1eca5b35d394
bump-go-version is a skill published in the GitHub repository kubernetes-sigs/agent-sandbox (3,791 stars, last pushed today), licensed Apache-2.0. It adds 25 tokens to every session and 1,067 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
stack-trace-go-probe
Internal helper for meta-stack-trace-investigator. Use when a Go panic or stack trace needs Go-specific nil/error checks, go test reproducer guidance, and patch targets.
golang-testing
Production-ready Golang tests — table-driven tests, testify suites and mocks, parallel tests, fuzzing, fixtures, goroutine leak detection with goleak, snapshot testing, code coverage, integration tests, idiomatic test naming. Use when writing or reviewing Go tests, choosing a testing approach, setting up Go test CI…
golang-benchmark
Golang benchmarking, profiling, and performance measurement. Use when writing, running, or comparing Go benchmarks, profiling hot paths with pprof, interpreting CPU/memory/trace profiles, analyzing results with benchstat, setting up CI benchmark regression detection, or investigating production performance with…
golang-continuous-integration
GitHub Actions CI/CD pipeline configuration for Golang projects — workflow files for test, lint, SAST, coverage and vulnerability-scan jobs, Dependabot and Renovate config files, GoReleaser release pipelines, Docker build/push, repository security settings, and AI-driven PR review. Use when setting up or improving Go…
golang-dependency-injection
Comprehensive guide for dependency injection (DI) in Golang. Covers why DI matters (testability, loose coupling, separation of concerns, lifecycle management), manual constructor injection, and DI library comparison (google/wire, uber-go/dig, uber-go/fx, samber/do). Use this skill when designing service architecture…
golang-documentation
Comprehensive documentation guide for Golang projects, covering godoc comments, README, CONTRIBUTING, CHANGELOG, Go Playground, Example tests, API docs, and llms.txt. Use when writing or reviewing doc comments, documentation, adding code examples, setting up doc sites, or discussing documentation best practices.…