sandbox-agent
Facilitates deployment and integration of AI coding agents in sandboxed environments using a universal API for orchestration.
Install this skill
or
62/100
Security score
The sandbox-agent skill was audited on Jun 24, 2026 and we found 16 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 111
Piping content to sh shell
SourceSKILL.md
| 111 | curl -fsSL https://releases.rivet.dev/sandbox-agent/0.4.x/install.sh | sh |
medium line 111
Curl to non-GitHub URL
SourceSKILL.md
| 111 | curl -fsSL https://releases.rivet.dev/sandbox-agent/0.4.x/install.sh | sh |
medium line 217
Curl to non-GitHub URL
SourceSKILL.md
| 217 | curl "http://your-server:2468/v1/health" \ |
low line 60
Access to .env file
SourceSKILL.md
| 60 | if (process.env.ANTHROPIC_API_KEY) envs.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY; |
low line 61
Access to .env file
SourceSKILL.md
| 61 | if (process.env.OPENAI_API_KEY) envs.OPENAI_API_KEY = process.env.OPENAI_API_KEY; |
low line 72
Access to .env file
SourceSKILL.md
| 72 | if (process.env.ANTHROPIC_API_KEY) envVars.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY; |
low line 73
Access to .env file
SourceSKILL.md
| 73 | if (process.env.OPENAI_API_KEY) envVars.OPENAI_API_KEY = process.env.OPENAI_API_KEY; |
low line 210
Access to .env file
SourceSKILL.md
| 210 | token: process.env.SANDBOX_TOKEN, |
low line 12
External URL reference
SourceSKILL.md
| 12 | If something is not working as intended or you are stuck, prompt the user to join the [Rivet Discord](https://rivet.dev/discord) or file an issue on [GitHub](https://github.com/rivet-dev/sandbox-agent |
low line 111
External URL reference
SourceSKILL.md
| 111 | curl -fsSL https://releases.rivet.dev/sandbox-agent/0.4.x/install.sh | sh |
low line 209
External URL reference
SourceSKILL.md
| 209 | baseUrl: "http://your-server:2468", |
low line 217
External URL reference
SourceSKILL.md
| 217 | curl "http://your-server:2468/v1/health" \ |
low line 225
External URL reference
SourceSKILL.md
| 225 | --endpoint http://your-server:2468 |
low line 258
External URL reference
SourceSKILL.md
| 258 | baseUrl: "http://127.0.0.1:2468", |
low line 300
External URL reference
SourceSKILL.md
| 300 | Open the Inspector UI at `/ui/` on your server (for example, `http://localhost:2468/ui/`) to inspect sessions and events in a GUI. |
low line 302
External URL reference
SourceSKILL.md
| 302 |  |
Scanned on Jun 24, 2026
View Security DashboardGitHub Stars 17
Rate this skill
Categorydevelopment
UpdatedJune 24, 2026
openclawapibackenddevopsml-ai-engineerbackend-developerdevops-sreproduct-managertechnical-pmdockerawsgcpazureopenaianthropicdevelopmentproduct
rivet-dev/skills