mcpField
D
docker-sandbox

docker-sandbox

github.com/joelhooksCloud & DevOps65103 installsUpdated 1d ago
Repository

About docker-sandbox

docker-sandbox is a skill for choosing and managing an isolated Docker workspace for demos or runtime jobs. It directs demo work to sandbox-computer and runtime work to workflow-rig, with safeguards for credentials, files, and container ownership.

Key features

  1. 01Distinguish demos from runtime jobs
  2. 02Select the appropriate sandbox workflow
  3. 03Preserve files and container ownership
  4. 04Protect authentication data
  5. 05Verify requested services and ports

Use cases

  1. 01Set up an isolated demo workspace
  2. 02Launch a runtime job in a sandbox
  3. 03Diagnose unavailable sandbox capability
  4. 04Check a launched service before sharing its URL

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/joelhooks/joelclaw --skill docker-sandbox

After installing, type/docker-sandboxin Claude Code to confirm it loaded.

Bundled filesagents/openai.yamlassets/small-logo.svg

Details

From the project README

Docker sandbox

Resolve whether the request is a demo/example workspace or a runtime workload. For demos, examples, and isolated workshop work, use the installed sandbox-computer skill and its standing template. For runtime jobs, use workflow-rig and the configured sandbox adapter.

Inspect the target directory and current Docker capability. Use live help for the selected tool. Preserve user files and existing container ownership. A scaffold request ends with the scaffold; a launch request includes starting and verifying the requested workspace.

Keep authentication owned by the sandbox's approved login mechanism and persistent auth volumes. Never copy the user's real auth directory into a demo, embed credentials in an image, print auth files, or put credential payloads in command arguments. Check login through status commands that do not reveal tokens.

Isolation is part of the contract. If the requested sandbox is unavailable, diagnose that capability or report the precise block. Do not silently execute its task on the host. Host mode requires authorization when it changes the requested isolation boundary.

Publish only requested ports through the owning host mechanism. Verify the expected service before reporting a URL. Stop and remove only containers and processes this task owns. Report the actual sandbox, mounted project, checks, and any unresolved limitation.

Comments

Markdown supported