Set up the review sandbox (one-time)

Installs and verifies everything the reproduce-issue skill / reproduce-verifier agent need to run untrusted PR code in isolation. Idempotent — each step checks first and only acts if needed. Steps needing sudo are handed to the user to run in their terminal (this skill cannot sudo non-interactively).

Run uname -s first — the path differs on Linux vs macOS.

1. Docker

docker info >/dev/null 2>&1 && echo "docker OK" || echo "docker MISSING"

• MISSING, Linux: install Docker Engine, then sudo systemctl enable --now docker and add yourself to the docker group (sudo usermod -aG docker $USER, then re-login).
• MISSING, macOS: brew install colima docker then colima start (or install Docker Desktop).

2. Isolation runtime

Linux — gVisor (runsc)