Menu
Run project commands (build, test, lint) in a cloud sandbox with common runtimes and on-demand toolchains.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
| name | sandbox |
| description | Run project commands (build, test, lint) in a cloud sandbox with common runtimes and on-demand toolchains. |
Use sandbox to run project commands: builds, tests, lints, and anything that needs runtimes not available locally (Java, Python, etc.). The sandbox auto-creates on first use, syncs your worktree, and stops automatically when idle.
For technical browser orchestration guidance โ choosing between existing UI automation, lightweight interaction, deterministic visible capture, verification, and artifact patterns โ use the dedicated browser skill. Keep app-specific browser flows in repo runbooks or task prompts.
Supported forms:
sandbox <command> [args...]sandbox bash -c '<command>'sandbox bash -lc '<command>'sandbox sh -c '<command>'sandbox sh -lc '<command>'Examples:
sandbox mvn test -pl module-auth
sandbox ./gradlew build
sandbox bash -c 'make build && make test'
sandbox npm test
For a single command, write it naturally: sandbox mvn test -pl module-auth.
For shell chaining, pipelines, or redirects, wrap the command explicitly:
sandbox bash -c 'make build && make test'
sandbox bash -c 'npm run build && npm test'
cd /workspace/worktrees/myrepo/feat/auth
sandbox mvn test -pl module-auth # auto-creates sandbox, syncs, runs
# edit code (no need to commit)...
sandbox mvn test -pl module-auth # syncs uncommitted changes, reuses sandbox
sandbox ./gradlew spotlessCheck # same sandbox, different command
The sandbox image is intentionally slim. Preinstalled by default:
uv available for fast installs.ondrej/php, with common CLI extensions installed.sudo dockerd & before use.agent-browser with Chrome for Testing preinstalled, plus ffmpeg, xvfb, xdotool, tree, and ImageMagick (identify, convert, compare).Browser examples:
sandbox agent-browser --session qa open https://example.com
sandbox agent-browser --session qa screenshot /tmp/example.png
sandbox identify /tmp/example.png
sandbox xvfb-run -a agent-browser --session qa open https://example.com --headed
Install less-common toolchains on demand per task by running the appropriate
installer inside the sandbox (for example via nvm, pyenv, rustup, or by
downloading a release tarball into $HOME/.local). Use sandbox bash -lc '...'
to run install commands, then invoke the toolchain the same way.
To use a non-default version, either set it permanently or inline it with your command:
# Permanent (persists across sandbox calls, only need to set once)
sandbox sdk default java 17.0.18-tem
sandbox mvn test
# Inline (one-off version switch + command)
sandbox bash -c 'sdk use java 17.0.18-tem && mvn test'
sandbox bash -c 'nvm use 20 && npm test'
/workspace/sandbox inside the sandbox โ paths in error output will show this prefixsandbox commands on the same worktree can run in parallelRead Slack threads or channel history and post concise bot replies through slack-post-message when the user asks to answer in Slack or when a Slack event payload provides channel and thread context.
GitHub CLI surface allowed by Thor's server-side gh policy. Append-only: Thor can create PRs, comments, and non-approval reviews but cannot approve, merge, edit, or delete prior artifacts.
Query and analyze Langfuse observability data (observations, metrics, scores) via the mcp CLI for debugging LLM behavior, cost, and user activity.
Orchestrate real browser interaction, screenshots, recordings, and UI evidence without encoding app-specific flows.
Inspect LaunchDarkly feature flags, environments, segments, and metrics through the read-only ldcli wrapper.
Git command surface allowed by Thor's server-side policy. Thor's git is append-only to the local repo and to origin. Load this skill to see what commands are allowed and the common redirect patterns.