agentic-ai-engineering/products/security-foundation/skills/agent-sandbox/SKILL.md

name	description	user-invocable
agent-sandbox	E2B sandbox isolation for risky agent operations. Complete filesystem isolation. Agent cannot touch the local machine.	true

Agent Sandbox

Isolate risky agent operations in an E2B sandbox.

How It Works

Agent code -> E2B Sandbox (isolated VM)
  - Full root access inside sandbox
  - Cannot access host filesystem
  - Cannot access host network
  - Cannot access host credentials
  - Sandbox destroyed after session

Commands

# Start a sandbox session
sandbox start --template python3.12

# Run code in sandbox
sandbox run "pip install requests && python script.py"

# Start a web server (exposes port)
sandbox serve --port 8080 ./app

# List active sandboxes
sandbox list

# Kill sandbox
sandbox kill <id>

Use Cases

• Running untrusted agent code
• Testing dangerous operations (rm -rf, format, delete)
• Multi-tenant agent execution
• CI/CD with agent-generated code

Integration

pip install e2b

$ARGUMENTS