メニュー
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/FlorianBruniaux/claude-code-plugins --skill sandbox-statusコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
Autonomous improvement loop: scan codebase metrics, scaffold experiment files, run agent-driven iterations until metric improves
Audit Claude Code agents defined in .claude/agents/ for description specificity, model tier appropriateness, tools scoping, and system prompt quality. Detects dispatch ambiguity between agents, flags over-permissive tool grants, and checks for human-in-the-loop patterns that break programmatic orchestration. Use when onboarding to a project with existing agents, after adding new agents to a fleet, or when an orchestrator consistently selects the wrong agent.
Audit Claude Code hooks defined in settings.json files for validity, performance safety, and correctness. Resolves each command against the filesystem, checks exit-code strategy for blocking hooks, flags missing timeouts, and reviews interactive vs async patterns. Use when setting up hooks for the first time, debugging a hook that never fires or hangs the agent, or doing a periodic hooks hygiene pass.
SOC 職業分類に基づく
SKILL.md を表示中
| name | sandbox-status |
| description | Display native sandbox status, configuration, and recent violations |
| effort | low |
| when_to_use | Use to check whether Claude Code sandbox mode is active and what restrictions apply. |
| disable-model-invocation | true |
Inspect the native Claude Code sandbox state, active configuration, and security events.
/sandbox-status
Check sandbox availability
Show active configuration
List recent sandbox violations
dangerouslyDisableSandbox)#!/bin/bash
echo "=== Native Sandbox Status ==="
echo
# 1. Platform Check
echo "Platform:"
case "$OSTYPE" in
darwin*)
echo " ✅ macOS (Seatbelt built-in)"
;;
linux*)
if which bubblewrap >/dev/null 2>&1; then
echo " ✅ Linux (bubblewrap installed)"
bubblewrap --version 2>/dev/null | head -1
else
echo " ❌ Linux (bubblewrap NOT installed)"
echo " Install: sudo apt-get install bubblewrap socat"
fi
if which socat >/dev/null 2>&1; then
echo " ✅ socat installed"
else
echo " ❌ socat NOT installed"
fi
;;
*)
echo " ❌ Unsupported platform: $OSTYPE"
;;
esac
echo
# 2. Configuration
echo "Configuration (from settings.json):"
if [ -f .claude/settings.json ]; then
CONFIG=".claude/settings.json"
elif [ -f ~/.claude/settings.json ]; then
CONFIG="~/.claude/settings.json"
CONFIG=
[ -n ];
AUTO_ALLOW=$(jq -r 2>/dev/null)
WRITE_PATHS=$(jq -r 2>/dev/null | )
DENIED_READS=$(jq -r 2>/dev/null | )
NET_POLICY=$(jq -r 2>/dev/null)
DOMAINS=$(jq -r 2>/dev/null | -3 | )
DOMAINS_COUNT=$(jq -r 2>/dev/null)
[ -n ];
EXCLUDED=$(jq -r 2>/dev/null | )
npx >/dev/null 2>&1;
=== Native Sandbox Status ===
Platform:
✅ macOS (Seatbelt built-in)
Configuration (from settings.json):
Source: .claude/settings.json
Auto-allow: true
Allowed writes: ${CWD}, /tmp
Denied reads: ${HOME}/.ssh, ${HOME}/.aws, ${HOME}/.kube
Network policy: deny
Allowed domains: api.anthropic.com, registry.npmjs.com, github.com... (9 total)
Excluded commands: docker, kubectl, podman
Recent sandbox violations:
ℹ️ Log inspection not yet implemented
Tip: Check Claude Code session logs for sandbox violation notifications
Open-Source Runtime:
✅ npx available - can use @anthropic-ai/sandbox-runtime
Usage: npx @anthropic-ai/sandbox-runtime <command>
Documentation:
Guide: guide/sandbox-native.md
Official: https://code.claude.com/docs/en/sandboxing
Runtime: https://github.com/anthropic-experimental/sandbox-runtime