Docker Sandbox
Isolate and test code in disposable Docker containers to ensure secure deployments and reproducible environments.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add docker-sandbox npx -- -y @trustedskills/docker-sandbox
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"docker-sandbox": {
"command": "npx",
"args": [
"-y",
"@trustedskills/docker-sandbox"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill enables AI agents to execute tools like Claude and Codex within isolated Docker containers using Docker Desktop's docker sandbox feature. It provides a secure and reproducible environment for running agent tools, leveraging existing subscriptions to Claude Max and ChatGPT Pro without incurring additional API key billing. The sandboxes ensure that tool execution is contained and doesn’t impact the host system.
When to use it
- Secure Tool Execution: When you need to run potentially risky or untrusted code within an agent tool environment.
- Reproducible Environments: To guarantee consistent results across different runs by isolating dependencies.
- Claude and Codex Integration: Specifically for using Claude and Codex tools, as this skill manages their authentication.
- Automated Agent Loops: To create pre-warmed Docker sandboxes at the start of an agent loop and reuse them for multiple stories before destroying them at the end.
Key capabilities
- Isolated execution of Claude and Codex using Docker containers.
- Automatic management of Claude setup tokens (OAuth).
- Integration with ChatGPT Pro authentication via
~/.codex/auth.json. - Support for pre-warming sandboxes to reduce execution overhead within agent loops.
- Leverages existing Claude Max and ChatGPT Pro subscriptions.
Example prompts
- "Create a Docker sandbox named 'my-sandbox' and run the claude tool on my project located at /path/to/project."
- "Execute the codex tool inside an existing sandbox called 'my-sandbox', setting up authentication from a stored secret."
- "List all currently running Docker sandboxes."
Tips & gotchas
- Prerequisites: Requires Docker Desktop (OrbStack works) and
docker sandboxversion 0.11.0 or higher to be installed and configured. - Authentication Setup: Initial authentication for Claude requires interactive browser access, while Codex uses a local login process that generates an
auth.jsonfile. These credentials must be stored as secrets within the agent environment. - Token Refresh: Claude tokens expire after one year and need to be refreshed manually; Codex authentication may require re-login if it fails.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.