The Agent Skills Directory

Command Execution via Secret Resolution: The skill provides instructions for using the sbx secret set --command flag. This feature allows the Docker Sandboxes CLI to execute shell commands on the host system to dynamically retrieve secret values (e.g., calling gh auth token to fetch a GitHub token). While this is a standard capability of the tool for secure credential management, it establishes a mechanism for command execution on the user's system. The skill includes a clear warning that this feature should never be used with untrusted input or input influenced by the agent.
Dynamic Network Policy Modification: The agent is instructed on how to manage network egress rules via the sbx policy command suite. This allows for the programmatic modification of host-based and CIDR-based allowlists and denylists based on user requests, which is a core capability of the managed tool but constitutes an interaction surface for network policy changes.
Credential Management Surface: The skill manages a local credential store via sbx secret. The instructions emphasize using the proxy-injection model rather than passing plaintext secrets in environment variables, which is a positive security practice, but it does mean the agent has capabilities to interact with and provision credentials for sandboxed environments.

docker-sandboxes-network-credentials