Menu
Run code in Codex fully isolated sandbox - network disabled, CWD only, Seatbelt/Docker isolation
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Complex browser automation workflow using claude-in-chrome MCP with mandatory sequential-thinking planning. Use when automating multi-step web interactions, form filling, navigation sequences, or web scraping.
End-to-end testing workflow for validating complete user journeys through web applications using claude-in-chrome MCP. Specializes in test assertions, suite organization, evidence collection, and pass/fail reporting.
Screenshot-based visual comparison and regression testing using claude-in-chrome MCP. Captures, compares, and validates UI states to detect layout shifts, visual bugs, and design regressions across viewports.
Structured data extraction from web pages using claude-in-chrome MCP with sequential-thinking planning. Focus on READ operations, data transformation, and pagination handling for multi-page extraction.
Use when conducting comprehensive code review for pull requests across multiple quality dimensions. Orchestrates 12-15 specialized reviewer agents across 4 phases using star topology coordination. Covers automated checks, parallel specialized reviews (quality, security, performance, architecture, documentation), integration analysis, and final merge recommendation in a 4-hour workflow.
Create Claude Code hooks with proper schemas, RBAC integration, and performance requirements. Use when implementing PreToolUse, PostToolUse, SessionStart, or any of the 10 hook event types for automation, validation, or security enforcement.
| name | codex-sandbox |
| description | Run code in Codex fully isolated sandbox - network disabled, CWD only, Seatbelt/Docker isolation |
| allowed-tools | Bash, Read, Write, TodoWrite, Glob, Grep |
Before writing ANY code, you MUST check:
.claude/library/catalog.json.claude/docs/inventories/LIBRARY-PATTERNS-GUIDE.mdD:\Projects\*| Match | Action |
|---|---|
| Library >90% | REUSE directly |
| Library 70-90% | ADAPT minimally |
| Pattern exists | FOLLOW pattern |
| In project | EXTRACT |
| No match | BUILD (add to library after) |
Execute code in Codex's fully isolated sandbox environment for safe experimentation with untrusted or risky code.
What Claude Can't Do: Claude runs in your environment. Codex sandbox provides:
# Basic sandbox execution
/codex-sandbox "Refactor auth system and run tests"
# With iteration limit
/codex-sandbox "Fix all tests" --max-iterations 10
# Risky experiment
/codex-sandbox "Try experimental algorithm implementation"
codex --full-auto --sandbox true --network disabled "Your task"
# Via script
CODEX_MODE=sandbox bash scripts/multi-model/codex-yolo.sh "Task" "id" "." "10" "sandbox"
| Layer | Protection |
|---|---|
| Network | DISABLED - no external connections |
| Filesystem | CWD only - no parent access |
| OS-Level | Seatbelt (macOS) / Docker |
| Process | Subprocess jail with limits |
| Commands | Blocked: rm -rf, sudo, etc. |
// 1. Run risky refactoring in sandbox
const result = await codexSandbox("Refactor entire auth system");
// 2. If successful, apply to real codebase
if (result.tests_pass) {
Task("Coder", "Apply sandboxed changes to main", "coder");
}
multi-model/codex/sandbox/{session_id}