sandbox-configuration

Sandbox Configuration Skill

MANDATORY: Invoke docs-management First

STOP - Before providing ANY response about Claude Code sandboxing:

1. INVOKE docs-management skill
2. QUERY for the user's specific topic
3. BASE all responses EXCLUSIVELY on official documentation loaded

Skipping this step results in outdated or incorrect information.

Verification Checkpoint

Before responding, verify:

• Did I invoke docs-management skill?
• Did official documentation load?
• Is my response based EXCLUSIVELY on official docs?

If ANY checkbox is unchecked, STOP and invoke docs-management first.

Overview

Central authority for Claude Code sandboxing and isolation. This skill uses 100% delegation to docs-management - it contains NO duplicated official documentation.

Architecture: Pure delegation with keyword registry. All official documentation is accessed via docs-management skill queries.

When to Use This Skill

Keywords: sandboxing, sandbox, /sandbox, filesystem isolation, network isolation, bubblewrap, Seatbelt, dangerouslyDisableSandbox, allowUnsandboxedCommands, excludedCommands, httpProxyPort, socksProxyPort, domain restrictions, sandbox configuration, blocked access

Use this skill when:

• Configuring sandbox settings
• Understanding filesystem isolation
• Setting up network isolation
• Troubleshooting sandbox blocking commands
• Understanding OS-level enforcement
• Configuring escape hatches
• Setting up proxy support

Keyword Registry for docs-management Queries

Use these keywords when querying docs-management skill for official documentation:

Sandbox Overview

Filesystem Isolation

Network Isolation

Configuration Options

Quick Decision Tree

What do you want to do?

1. Enable/disable sandbox -> Query docs-management: "sandboxing", "/sandbox command"
2. Configure filesystem access -> Query docs-management: "filesystem isolation", "sandbox filesystem"
3. Configure network access -> Query docs-management: "network isolation", "domain restrictions"
4. Allow specific commands -> Query docs-management: "excludedCommands", "allowUnsandboxedCommands"
5. Set up proxy -> Query docs-management: "httpProxyPort", "socksProxyPort"
6. Understand limitations -> Query docs-management: "sandbox security limitations"

Topic Coverage

Sandbox System

• Sandboxed bash tool overview
• /sandbox slash command
• Why sandboxing matters (approval fatigue, productivity, autonomy)
• OS-level enforcement (bubblewrap on Linux, Seatbelt on macOS)
• Open source sandbox runtime

Filesystem Isolation Topics

• Default writes behavior
• Default read behavior
• Blocked access patterns
• Custom allowed and denied paths
• Protection against critical file modification

Network Isolation Topics

• Domain restrictions
• User confirmation for new domains
• Custom proxy support
• Comprehensive coverage for subprocesses
• httpProxyPort and socksProxyPort settings

Configuration Options Topics

• dangerouslyDisableSandbox escape hatch
• allowUnsandboxedCommands configuration
• excludedCommands list
• Security limitations and considerations

Troubleshooting Quick Reference

Related Skills

• permission-management - For allow/deny/ask rules
• enterprise-security - For managed policies
• settings-management - For general configuration

Version History

• v1.0.0 (2025-11-30): Initial release (split from security-meta)
  • Focused on sandboxing and isolation only
  • Pure delegation architecture
  • Comprehensive keyword registry

Last Updated

Date: 2025-11-30 Model: claude-opus-4-5-20251101