arc-skill-sandboxTest untrusted skills in an isolated environment before installing. Monitors network access, filesystem writes, environment variable reads, and subprocess ca...
Install via ClawdBot CLI:
clawdbot install trypto1019/arc-skill-sandboxGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
exec(Accesses system directories or attempts privilege escalation
/proc/AI Analysis
The skill is a security tool designed to analyze other skills in a sandbox, and its described functionality is consistent with this purpose. The identified signals (UNSAFE_SHELL, SUSPICIOUS_PERMISSIONS) are likely part of its monitoring or testing mechanisms, not malicious actions taken by the skill itself against the user's system.
Audited Apr 16, 2026 · audit v1.0
Generated Mar 21, 2026
Developers or organizations vetting third-party skills from repositories like ClawHub before integration. The sandbox allows runtime analysis to detect hidden malicious behaviors like data exfiltration or unauthorized network calls, ensuring only safe skills are installed in production agents.
Companies in regulated industries use the sandbox to audit custom or third-party AI skills for compliance with data protection policies. It monitors access to sensitive environment variables and filesystem writes, generating reports for internal audits and risk assessments.
Students or trainers learning AI agent development use the sandbox to safely test and debug their skills in a controlled environment. It helps identify unintended behaviors like excessive network requests or file deletions without risking system integrity.
Security researchers analyze potentially malicious skills by running them in honeypot mode with fake credentials. This reveals attack patterns, such as attempts to exfiltrate data or execute unauthorized subprocesses, aiding in threat intelligence.
DevOps teams integrate the sandbox into CI/CD pipelines to automatically test new skill versions before deployment. It ensures skills do not introduce security vulnerabilities, like unauthorized network access, into live agent environments.
Offer a basic sandbox for free to individual developers, with premium features like advanced monitoring, detailed reporting, and integration APIs for enterprises. Revenue comes from subscription tiers and enterprise licensing.
Provide a cloud-based sandbox service where users upload skills for automated analysis. Include features like batch testing, compliance reporting, and alerts for suspicious activities, targeting businesses with multiple AI agents.
Offer consulting services to help organizations integrate the sandbox into their existing security workflows. Customize monitoring rules, generate compliance reports, and provide training on interpreting safety verdicts for specific use cases.
💬 Integration Tip
Integrate the sandbox into automated workflows using its JSON report output; for example, trigger it after static scans in a CI/CD pipeline to block unsafe skills before deployment.
Scored Jun 19, 2026
Design, provision, and connect cloud resources across servers, networks, and services.
提供思科网络设备、产品规格、认证培训及网络安全解决方案相关信息和技术支持建议。
Describes the NemoClaw plugin and blueprint architecture and how they orchestrate the OpenClaw sandbox. Use when looking up architecture, plugin structure, or blueprint design. Trigger keywords - nemoclaw architecture, nemoclaw plugin blueprint structure, nemoclaw vs openshell, which cli, nemoclaw cli, openshell cli, sandbox commands, nemoclaw cli commands, nemoclaw command reference, nemoclaw network policy, sandbox egress control operator approval, nemoclaw troubleshooting, nemoclaw debug sandbox issues.
Configure and control the open-source 10.5 GHz PLFM phased array radar with FPGA processing, STM32 firmware, and Python GUI for beamforming and signal visual...
Get surf forecasts and current conditions from Surfline public endpoints (no login). Use to look up Surfline spot IDs, fetch forecasts/conditions for specific spots, and summarize multiple favorite spots.
Analyze IP addresses with subnet calculation and CIDR notation. Use when planning network addressing.