Inspect platform support and configured restrictions for the Claude Code sandbox, which limits command access. Review writable paths, protected credential files, allowed network domains, and excluded commands. Recent violation log inspection is not yet implemented.
中文简介正在准备中。当前显示英语简介。
Display native sandbox status, configuration, and recent violations
安装前可以查看交给 AI 代理的指令内容。
Inspect the native Claude Code sandbox state, active configuration, and security events.
/sandbox-status
Check sandbox availability
Show active configuration
List recent sandbox violations
dangerouslyDisableSandbox)#!/bin/bash
echo "=== Native Sandbox Status ==="
echo
# 1. Platform Check
echo "Platform:"
case "$OSTYPE" in
darwin*)
echo " ✅ macOS (Seatbelt built-in)"
;;
linux*)
if which bubblewrap >/dev/null 2>&1; then
echo " ✅ Linux (bubblewrap installed)"
bubblewrap --version 2>/dev/null | head -1
else
echo " ❌ Linux (bubblewrap NOT installed)"
echo " Install: sudo apt-get install bubblewrap socat"
fi
if which socat >/dev/null 2>&1; then
echo " ✅ socat installed"
else
echo " ❌ socat NOT installed"
fi
;;
*)
echo " ❌ Unsupported platform: $OSTYPE"
;;
esac
echo
# 2. Configuration
echo "Configuration (from settings.json):"
if [ -f .claude/settings.json ]; then
CONFIG=".claude/settings.json"
elif [ -f ~/.claude/settings.json ]; then
CONFIG="~/.claude/settings.json"
else
echo " ⚠️ No settings.json found"
CONFIG=""
fi
if [ -n "$CONFIG" ]; then
echo " Source: $CONFIG"
# Auto-allow mode
AUTO_ALLOW=$(jq -r '.sandbox.autoAllowBashIfSandboxed // "not set"' "$CONFIG" 2>/dev/null)
echo " Auto-allow: $AUTO_ALLOW"
# Escape hatch
ESCAPE=$(jq -r '.sandbox.allowUnsandboxedCommands // "not set"' "$CONFIG" 2>/dev/null)
echo " dangerouslyDisableSandbox allowed: $ESCAPE"
# Allowed write paths
WRITE_PATHS=$(jq -r '.sandbox.filesystem.allowWrite[]? // empty' "$CONFIG" 2>/dev/null | tr '\n' ', ')
echo " Allowed writes: ${WRITE_PATHS:-not set}"
# Credential files denied to every subprocess
CRED_FILES=$(jq -r '.sandbox.credentials.files[]?.path // empty' "$CONFIG" 2>/dev/null | tr '\n' ', ')
echo " Denied credential files: ${CRED_FILES:-not set}"
# Strict allowlist switch
STRICT=$(jq -r '.sandbox.network.strictAllowlist // "not set (default false)"' "$CONFIG" 2>/dev/null)
echo " Strict allowlist: $STRICT"
# Allowed domains
DOMAINS=$(jq -r '.sandbox.network.allowedDomains[]? // empty' "$CONFIG" 2>/dev/null | head -3 | tr '\n' ', ')
DOMAINS_COUNT=$(jq -r '.sandbox.network.allowedDomains | length' "$CONFIG" 2>/dev/null)
if [ -n "$DOMAINS" ]; then
echo " Allowed domains: $DOMAINS... ($DOMAINS_COUNT total)"
else
echo " Allowed domains: not set"
fi
# Excluded commands
EXCLUDED=$(jq -r '.sandbox.excludedCommands[]? // empty' "$CONFIG" 2>/dev/null | tr '\n' ', ')
echo " Excluded commands: ${EXCLUDED:-not set}"
fi
echo
# 3. Recent Violations (placeholder - actual implementation would read Claude Code logs)
echo "Recent sandbox violations:"
echo " ℹ️ Log inspection not yet implemented"
echo " Tip: Check Claude Code session logs for sandbox violation notifications"
echo
# 4. Open-Source Runtime
echo "Open-Source Runtime:"
if which npx >/dev/null 2>&1; then
echo " ✅ npx available - can use @anthropic-ai/sandbox-runtime"
echo " Usage: npx @anthropic-ai/sandbox-runtime <command>"
else
echo " ⚠️ npx not found (install Node.js)"
fi
echo
# 5. Documentation
echo "Documentation:"
echo " Guide: guide/security/sandbox-native.md"
echo " Official: https://code.claude.com/docs/en/sandboxing"
echo " Runtime: https://github.com/anthropic-experimental/sandbox-runtime"
=== Native Sandbox Status ===
Platform:
✅ macOS (Seatbelt built-in)
Configuration (from settings.json):
Source: .claude/settings.json
Auto-allow: true
dangerouslyDisableSandbox allowed: false
Allowed writes: ${CWD}, /tmp
Denied credential files: ~/.ssh, ~/.aws, ~/.gnupg
Strict allowlist: not set (default false)
Allowed domains: api.anthropic.com, registry.npmjs.com, github.com... (9 total)
Excluded commands: docker, kubectl, podman
Recent sandbox violations:
ℹ️ Log inspection not yet implemented
Tip: Check Claude Code session logs for sandbox violation notifications
Open-Source Runtime:
✅ npx available - can use @anthropic-ai/sandbox-runtime
Usage: npx @anthropic-ai/sandbox-runtime <command>
Documentation:
Guide: guide/security/sandbox-native.md
Official: https://code.claude.com/docs/en/sandboxing
Runtime: https://github.com/anthropic-experimental/sandbox-runtime
还没有评价。欢迎分享你的使用感受。
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
Evaluate Claude Code agents, skills, and commands with weighted quality criteria. Get scores, readiness grades, template comparisons, and practical improvement suggestions in Markdown or JSON reports to guide reviews before release.
中文简介正在准备中。当前显示英语简介。
Assess a codebase across seven areas, including exposed credentials, security, dependencies, structure, and tests. Receive category scores, findings tied to file locations, and a prioritized improvement plan with smaller tasks that can be completed quickly.
中文简介正在准备中。当前显示英语简介。
Measure code patterns such as casts to any or disabled lint rules, then run repeated, targeted edits. Keep changes that improve the chosen metric, revert unsuccessful changes, and track results for each improvement loop.
中文简介正在准备中。当前显示英语简介。
Generate several separate solutions, compare them against criteria fixed in advance, and verify the selected result through executable checks or an independent reviewer. Keep a proof log documenting candidates, evidence, failures, and remaining limits.
中文简介正在准备中。当前显示英语简介。
Monitor a live application after deployment and compare it with a saved baseline, a record of its earlier state. Check page responses, loading times, and new errors, flag persistent changes, and produce a per-page health report.
中文简介正在准备中。当前显示英语简介。
Rebuild project context after clearing a conversation or returning to work. Review recent Git history, uncommitted changes, and TODO markers to get a structured summary of project status and suggested next steps.
中文简介正在准备中。当前显示英语简介。