clawql-sandbox-exec
Run isolated code snippets via sandbox_exec with safe persistence/session patterns.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Run isolated code snippets via sandbox_exec with safe persistence/session patterns.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Persist durable session outcomes with memory_ingest using stable titles, append threading, and wikilinks.
Deep ClawQL Obsidian vault workflows using memory_ingest and memory_recall MCP tools—structured insights, wikilink graphs, session threading, verbatim captures, and recall queries. Use when persisting important context, building a knowledge graph, starting tasks that may depend on prior vault notes, or when the user mentions Obsidian, the vault, memory, or long-running project context.
Workflow recipes for the ClawQL MCP audit tool. The audit tool is ClawQL Core (always registered — no CLAWQL_ENABLE_AUDIT); this skill is optional guidance for append/list/clear patterns during multi-step runs.
Deep ClawQL Obsidian vault workflows using memory_ingest and memory_recall MCP tools—structured insights, wikilink graphs, session threading, verbatim captures, and recall queries. Use when persisting important context, building a knowledge graph, starting tasks that may depend on prior vault notes, or when the user mentions Obsidian, the vault, memory, or long-running project context.
Use the cache MCP tool (ClawQL Core, always on) as ephemeral scratch state during active sessions.
Execute discovered API operations safely with argument validation and post-change verification.
| name | clawql-sandbox-exec |
| description | Run isolated code snippets via sandbox_exec with safe persistence/session patterns. |
CLAWQL_ENABLE_SANDBOX=1 registers sandbox_exec. Then unset CLAWQL_SANDBOX_BACKEND = bridge; auto = Seatbelt → Docker → bridge.
CLAWQL_ENABLE_SANDBOX=1 is set and you need bridge-only, auto, or a pinned CLAWQL_SANDBOX_BACKEND.CLAWQL_SANDBOX_BACKEND (omit, auto, or bridge / macos-seatbelt / docker) and matching env (bridge URL + token, Docker CLI, or macOS sandbox-exec).language and minimal code.sessionId + persistenceMode: session for multi-step tasks.ephemeral mode for one-off checks.bridge runs remotely via the Worker; macos-seatbelt / docker run locally under Seatbelt or container isolation — not an unconstrained host shell.memory_ingest if needed later.