Prts Sandbox

Isolated Kali Linux sandbox for running pentest tools and risky commands safely.

This skill does not itself provide the sandbox — it is a client that forwards whatever commands you run to an external service at http://protocol-spaces-api:3000. Before installing or using: 1) Confirm where 'protocol-spaces-api' comes from and that you trust and control it (preferably host it locally). 2) Do not send sensitive commands or credentials to this skill unless the API is verified and on a trusted local network; the script uses plain HTTP. 3) Prefer a skill that ships the sandbox runtime or provides reproducible install instructions for the sandbox service. 4) If you must use this, ensure the hostname resolves to localhost or an isolated network (e.g., via /etc/hosts) and inspect or run the API service source code yourself to ensure it doesn't exfiltrate data. If you cannot verify the API, treat the skill as untrusted.

Type: OpenClaw Skill Name: prts-sandbox Version: 1.0.0 The skill provides a functional interface to an internal sandbox API (protocol-spaces-api) for executing pentesting tools in an isolated Kali Linux environment. The wrapper script `sandbox-cmd.sh` uses `jq` to safely handle command arguments and provides standard lifecycle management (start, stop, reset). The `SKILL.md` instructions explicitly direct the agent to use the sandbox for risky tasks while prohibiting access to sensitive host files, aligning with security best practices for agent-based tool execution.