sandbox

sandbox is a skill for Claude Code, Codex from wecode-ai/Wegent. It costs 60 tokens per session (3,759 once invoked), scanned C, original, Apache-2.0.

A sandbox guide for running commands, testing code, and managing files in an isolated environment. A sandbox is a separate workspace intended to limit the effects of experiments and file operations.

In plain words
What is it for?
Use it for command execution, file browsing and changes, code tests, Git tasks, or other multi-step work that needs an isolated environment.
Why use it?
It provides a defined place to execute code and handle files without relying on the main environment.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/wecode-ai/wegent/sandbox
Any agent
npx skills add wecode-ai/Wegent --skill sandbox
Clone the repo
git clone --depth 1 https://github.com/wecode-ai/Wegent

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sandbox

README.md
[![agentmods](https://agentmods.dev/badge/skills/wecode-ai/wegent/sandbox.svg)](https://agentmods.dev/skills/wecode-ai/wegent/sandbox)
Your own site
<a href="https://agentmods.dev/skills/wecode-ai/wegent/sandbox"><img src="https://agentmods.dev/badge/skills/wecode-ai/wegent/sandbox.svg" alt="Measured on agentmods" height="20"></a>
Per session 60 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,759 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00060 $0.03759
Opus 5 $0.00030 $0.01879
Sonnet 5 $0.00012 $0.00752
Haiku 4.5 $0.00006 $0.00376

Measured 5d ago against content hash e15708d03a08, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

sandbox scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

The scan reads SKILL.md. This mod also ships 10 executable files (__init__.py, _base.py, claude_tool.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

| Create/delete directories | `exec` | Use `mkdir -p` or `rm -rf` directly |
backend/init_data/skills/sandbox/SKILL.md · 538 lines

How it starts

The opening of the file, as written. The whole thing — 538 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Sandbox Environment

Execute code, commands, and complex tasks securely in isolated Docker containers running AlmaLinux 9.4.

Core Capabilities

The sandbox environment provides fully isolated execution spaces with:

  1. Command Execution - Run shell commands, scripts, and programs
  2. File Operations - Read/write files, browse directories, manage filesystems
  3. Code Execution - Safely execute and test code
  4. Claude AI Tasks - Available for advanced use cases when explicitly requested by users
  5. Attachment Upload/Download - Upload generated files to Wegent for user download, or download user attachments for processing

When to Use

Use this skill when you need to:

  • ✅ Execute shell commands or scripts
  • ✅ Run and test code
  • ✅ Read, write, or manage files
  • ✅ Perform multi-step programming tasks
  • ✅ Git operations (clone, commit, push, etc.)
  • ✅ Require isolated environment for safety

Note: The sub_claude_agent tool should only be used when the user explicitly requests Claude AI assistance (e.g., "use Claude to generate...", "ask Claude to create...").

Available Tools

Command Execution

exec

Execute shell commands in the sandbox environment.

Use Cases:

  • Run single commands or scripts
  • Directory operations (create, delete, move)
  • Install dependencies, run tests
  • View system information

Parameters:

  • command (required): Shell command to execute
  • working_dir (optional): Working directory path
  • timeout (optional): Timeout in seconds

Example:

{
  "name": "exec",
  "arguments": {
    "command": "python script.py --arg value",
    "working_dir": "/home/user/project"
  }
}

sub_claude_agent

Run Claude AI to execute complex tasks in the sandbox.

⚠️ IMPORTANT: This tool should only be used when the user explicitly requests it. Do not use this tool automatically or as a default option.

Use Cases:

  • When user explicitly asks to use Claude (e.g., "use Claude to generate...", "ask Claude to create...")
  • Generate presentations and Word documents (when specifically requested)
  • Create code projects (when specifically requested)
  • Complex multi-step programming tasks (when specifically requested)

Read the full file on GitHub · 538 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 538 lines · 60 tokens per session scan C e15708d03a08

Subscribe to this mod's changes

sandbox is a skill published in the GitHub repository wecode-ai/Wegent (776 stars, last pushed today), licensed Apache-2.0. It adds 60 tokens to every session and 3,759 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

git-github-workflow

处理基于 git 和 GitHub 的真实协作工作流。当任务涉及仓库同步、分支管理、修复 bug、提交代码、创建或更新 PR、处理 review、解决冲突、检查 GitHub 认证与权限、或需要通过 fork 与用户仓库协作时使用,强调安全、干净、可审计的协作流程。必须在需要时使用该 Skill 并严格遵守相关规范!!!

KroMiose/nekro-agent · 101 tokens

skill-creator

创建新的 Claude Code 技能,修改和优化已有技能。当用户想从头创建技能、将当前工作流封装为技能、优化已有技能的内容或触发描述时使用此技能。即使用户没有明确说"技能",当他们想把某个重复工作流程固定下来时也应使用。.

KroMiose/nekro-agent · 72 tokens

agent-browser

使用此技能进行浏览器自动化操作,包括网页抓取、表单填写、UI 测试和任何 Web 交互任务。.

KroMiose/nekro-agent · 33 tokens

contribute-to-eliza

Finish and prove a scoped elizaOS GitHub issue, or independently review and repair an open elizaOS pull request. Use when contributing compute to elizaOS by selecting unclaimed work, implementing or reviewing changes, adding real tests and evidence, validating artifacts, or preparing a contribution for maintainer…

elizaOS/eliza · 68 tokens

build-monetized-app

Use when the task is building a new app on Eliza Cloud that earns money — chat apps, agent apps, MCP-backed tools, anything that calls the cloud's chat/messages/inference endpoints on behalf of users. Covers app registration, container deploy, markup configuration, affiliate header, app charge requests, x402 payment…

elizaOS/eliza · 126 tokens

discord

Use when you need to control Discord from Otto via the discord tool: send messages, react, post or upload stickers, upload emojis, run polls, manage threads/pins/search, create/edit/delete channels and categories, fetch permissions or member/role/channel info, set bot presence/activity, or handle moderation actions in…

elizaOS/eliza · 70 tokens