arc-skill-sandboxTest untrusted skills in an isolated environment before installing. Monitors network access, filesystem writes, environment variable reads, and subprocess ca...
Install via ClawdBot CLI:
clawdbot install trypto1019/arc-skill-sandboxGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
exec(Accesses system directories or attempts privilege escalation
/proc/AI Analysis
The skill is a security tool designed to analyze other skills in a sandbox, and its described functionality is consistent with this purpose. The identified signals (UNSAFE_SHELL, SUSPICIOUS_PERMISSIONS) are likely part of its monitoring or testing mechanisms, not malicious actions taken by the skill itself against the user's system.
Audited Apr 16, 2026 · audit v1.0
Generated Mar 21, 2026
Developers or organizations vetting third-party skills from repositories like ClawHub before integration. The sandbox allows runtime analysis to detect hidden malicious behaviors like data exfiltration or unauthorized network calls, ensuring only safe skills are installed in production agents.
Companies in regulated industries use the sandbox to audit custom or third-party AI skills for compliance with data protection policies. It monitors access to sensitive environment variables and filesystem writes, generating reports for internal audits and risk assessments.
Students or trainers learning AI agent development use the sandbox to safely test and debug their skills in a controlled environment. It helps identify unintended behaviors like excessive network requests or file deletions without risking system integrity.
Security researchers analyze potentially malicious skills by running them in honeypot mode with fake credentials. This reveals attack patterns, such as attempts to exfiltrate data or execute unauthorized subprocesses, aiding in threat intelligence.
DevOps teams integrate the sandbox into CI/CD pipelines to automatically test new skill versions before deployment. It ensures skills do not introduce security vulnerabilities, like unauthorized network access, into live agent environments.
Offer a basic sandbox for free to individual developers, with premium features like advanced monitoring, detailed reporting, and integration APIs for enterprises. Revenue comes from subscription tiers and enterprise licensing.
Provide a cloud-based sandbox service where users upload skills for automated analysis. Include features like batch testing, compliance reporting, and alerts for suspicious activities, targeting businesses with multiple AI agents.
Offer consulting services to help organizations integrate the sandbox into their existing security workflows. Customize monitoring rules, generate compliance reports, and provide training on interpreting safety verdicts for specific use cases.
💬 Integration Tip
Integrate the sandbox into automated workflows using its JSON report output; for example, trigger it after static scans in a CI/CD pipeline to block unsafe skills before deployment.
Scored Jun 19, 2026
Create a safe visible-diagnostic map for home Wi-Fi problems using device symptoms, router lights, placement notes, outage checks, speed tests, and support-r...
Network Tools: Network utilities: IP conversion/validation, subnet calculator, CIDR ranges, MAC formatting, port lookup, DNS resolution, private IP detection...
Printing Press CLI for Olx. OLX.pl job-listings reverse-engineered API (public, no auth)
技能太多不知道该用哪个,每次都要翻半天?本技能根据用户需求智能匹配最合适的已安装技能。关键词+语义双重匹配,输出Top3推荐+理由+适用场景,不再试错浪费时间。 触发词:选技能、用哪个技能、技能推荐、技能匹配、技能选择、该用什么、帮我选技能 排除:技能创建(用skill_builder)、技能搜索安装(用skil...
控制 Bambu P1S 拓竹3D打印机。支持文件管理(FTPS)、连接状态检查。可查看文件列表、上传下载gcode/3mf文件、查看延时摄影。
Design, provision, and connect cloud resources across servers, networks, and services.