---
name: agent-sandbox
description: E2B sandbox isolation for risky agent operations. Complete filesystem isolation. Agent cannot touch the local machine.
user-invocable: true
---

# Agent Sandbox

Isolate risky agent operations in an E2B sandbox.

## How It Works

```
Agent code -> E2B Sandbox (isolated VM)
  - Full root access inside sandbox
  - Cannot access host filesystem
  - Cannot access host network
  - Cannot access host credentials
  - Sandbox destroyed after session
```

## Commands

```bash
# Start a sandbox session
sandbox start --template python3.12

# Run code in sandbox
sandbox run "pip install requests && python script.py"

# Start a web server (exposes port)
sandbox serve --port 8080 ./app

# List active sandboxes
sandbox list

# Kill sandbox
sandbox kill <id>
```

## Use Cases

- Running untrusted agent code
- Testing dangerous operations (rm -rf, format, delete)
- Multi-tenant agent execution
- CI/CD with agent-generated code

## Integration

```bash
pip install e2b
```

$ARGUMENTS