Skip to main content

sandbox-agent

Facilitates deployment and integration of AI coding agents in sandboxed environments using a universal API for orchestration.

Install this skill

or
62/100

Security score

The sandbox-agent skill was audited on Jun 24, 2026 and we found 16 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 111

Piping content to sh shell

SourceSKILL.md
111curl -fsSL https://releases.rivet.dev/sandbox-agent/0.4.x/install.sh | sh
medium line 111

Curl to non-GitHub URL

SourceSKILL.md
111curl -fsSL https://releases.rivet.dev/sandbox-agent/0.4.x/install.sh | sh
medium line 217

Curl to non-GitHub URL

SourceSKILL.md
217curl "http://your-server:2468/v1/health" \
low line 60

Access to .env file

SourceSKILL.md
60if (process.env.ANTHROPIC_API_KEY) envs.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;
low line 61

Access to .env file

SourceSKILL.md
61if (process.env.OPENAI_API_KEY) envs.OPENAI_API_KEY = process.env.OPENAI_API_KEY;
low line 72

Access to .env file

SourceSKILL.md
72if (process.env.ANTHROPIC_API_KEY) envVars.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;
low line 73

Access to .env file

SourceSKILL.md
73if (process.env.OPENAI_API_KEY) envVars.OPENAI_API_KEY = process.env.OPENAI_API_KEY;
low line 210

Access to .env file

SourceSKILL.md
210token: process.env.SANDBOX_TOKEN,
low line 12

External URL reference

SourceSKILL.md
12If something is not working as intended or you are stuck, prompt the user to join the [Rivet Discord](https://rivet.dev/discord) or file an issue on [GitHub](https://github.com/rivet-dev/sandbox-agent
low line 111

External URL reference

SourceSKILL.md
111curl -fsSL https://releases.rivet.dev/sandbox-agent/0.4.x/install.sh | sh
low line 209

External URL reference

SourceSKILL.md
209baseUrl: "http://your-server:2468",
low line 217

External URL reference

SourceSKILL.md
217curl "http://your-server:2468/v1/health" \
low line 225

External URL reference

SourceSKILL.md
225--endpoint http://your-server:2468
low line 258

External URL reference

SourceSKILL.md
258baseUrl: "http://127.0.0.1:2468",
low line 300

External URL reference

SourceSKILL.md
300Open the Inspector UI at `/ui/` on your server (for example, `http://localhost:2468/ui/`) to inspect sessions and events in a GUI.
low line 302

External URL reference

SourceSKILL.md
302![Sandbox Agent Inspector](https://sandboxagent.dev/docs/images/inspector.png)
Scanned on Jun 24, 2026
View Security Dashboard
Installation guide →