Docker Sandbox

Create and manage Docker sandboxed VM environments for safe agent execution. Use when running untrusted code, exploring packages, or isolating agent workloads. Supports Claude, Codex, Copilot, Gemini, and Kiro agents with network proxy controls.

Review this skill before installing if you plan to use it for hostile or truly untrusted code. Confirm whether /run/docker.sock is isolated inside the sandbox VM or connected to the host Docker daemon, assume mounted workspaces can be modified by code in the sandbox, use deny-by-default network rules, and avoid docker sandbox reset unless you are prepared to lose sandbox state.

Type: OpenClaw Skill Name: docker-sandbox Version: 1.0.0 The OpenClaw AgentSkills skill bundle for 'docker-sandbox' is classified as benign. Its stated purpose is to create and manage isolated Docker sandboxed VM environments for safely executing untrusted code or agent workloads. All capabilities described, such as running arbitrary commands, mounting workspaces, and network controls, are explicitly designed to operate within this isolated environment. The documentation emphasizes security features like network policy controls to mitigate risks from code running inside the sandbox, rather than introducing risks to the host system. There is no evidence of prompt injection against the agent, data exfiltration, malicious execution on the host, or obfuscation within the provided files.