Agent Sandbox

Overview

AI agents execute code, modify files, and run shell commands. Without guardrails, a bad prompt or hallucination can delete your database, overwrite production configs, or exfiltrate secrets. This skill builds safety layers — sandboxed execution, filesystem restrictions, network policies, audit trails, and kill switches.

When to Use

• Running untrusted or AI-generated code in production
• Adding safety controls to coding agents that modify your codebase
• Restricting which files, directories, or commands an agent can access
• Logging every agent action for compliance or debugging
• Building multi-tenant agent platforms where agents need isolation

Instructions

Three layers, from cheapest to strongest. Pick by threat: a clumsy agent needs layer 1; hostile or untrusted code needs layer 2 or 3.

Layer 0: Use the sandbox your agent already ships