The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to install @cloudflare/sandbox from the public npm registry. This package is maintained by a well-known technology company (Cloudflare) and is considered a safe dependency.
[COMMAND_EXECUTION]: The script scripts/setup-sandbox-binding.sh is an interactive setup tool that modifies the local wrangler.jsonc file to configure the sandbox environment. This is a standard development utility.
[COMMAND_EXECUTION]: The script scripts/test-sandbox.ts executes docker ps via child_process.execSync to verify the local environment during development. This is a legitimate validation check for local container development.
[COMMAND_EXECUTION]: Several templates (templates/chat-agent.ts, templates/ci-cd.ts, templates/workspace.ts) demonstrate the ingestion of untrusted user input (e.g., command, buildCommand) into the sandbox.exec() method. While this presents an attack surface for indirect prompt injection within the sandbox, the skill provides extensive documentation and a specific 'Security Hardening' section in references/advanced.md that teaches the user how to mitigate these risks using allowlists, sanitization, and the Code Interpreter API.

cloudflare-sandbox