sbx/trivy

Docker, Inc

Aqua's open source vulnerability scanner — sandboxed because security scanners shouldn't be abl...

sbx/openclaw-mixin

Docker, Inc

OpenClaw as a mixin -- Node, the pinned openclaw release and the Chromium the browser tool uses, ...

sbx/openhands-mixin

Docker, Inc

OpenHands as a mixin — the `uv`-installed CLI and its managed CPython in an overlay, with the A...

sbx/panw-siem-telemetry

Docker, Inc

Ships sandbox observability (process, network, file, and agent-activity logs) to a SIEM HTTP even...

sbx/smolagents

Docker, Inc

Installs Hugging Face smolagents in an isolated Python virtual environment and exposes the smolag...

sbx/ecc

Docker, Inc

The agent-harness optimization content pack for Claude Code: rules, agents, commands, and — whe...

sbx/nanobot-mixin

Docker, Inc

nanobot as a mixin -- the agent's own uv tool installation in an overlay, with the proxy-managed ...

sbx/dynatrace

Docker, Inc

Wires an agent to a Dynatrace SaaS environment through the official hosted Dynatrace Remote MCP s...

sbx/jfrog-xray

Docker, Inc

Installs the JFrog CLI (jf), pre-wired to your JFrog Platform, so agents can run Xray security & ...

sbx/picoclaw-mixin

Docker, Inc

PicoClaw as a mixin — the pinned, SHA256-verified static binary in an overlay, with the Anthrop...

sbx/firecrawl

Docker, Inc

Adds live web search/scrape/crawl to any agent via the firecrawl-py SDK, wired to Firecrawl's clo...

sbx/gitguardian

Docker, Inc

Installs the GitGuardian CLI (ggshield) with proxy-injected API-key auth for api.gitguardian.com ...

sbx/trivy-mixin

Docker, Inc

Aqua's open source vulnerability scanner as a mixin — the pinned, SHA256-verified release binar...

sbx/amp

Docker, Inc

The frontier coding agent.

sbx/nanoclaw-mixin

Docker, Inc

NanoClaw as a mixin -- the host process and its checkout in an overlay, with the Docker Hub, OneC...

sbx/grafana

Docker, Inc

Adds the official Grafana MCP server (mcp-grafana) plus the grafana-client Python library to an a...

sbx/packages-through-sfw

Docker, Inc

Installs Socket Firewall Free and routes npm, pip, pip3, and python3 -m pip commands through sfw ...

sbx/vale

Docker, Inc

Installs the Vale prose linter from a pinned GitHub release.

sbx/panw-endpoint-enforcement

Docker, Inc

Marks agent processes as running inside a sandbox so a host-side endpoint security policy engine ...

sbx/amp-mixin

Docker, Inc

The frontier coding agent as a mixin -- Amp's own installer, the Amp credential, and its egress. ...

sbx/zeroclaw-mixin

Docker, Inc

ZeroClaw as a mixin — the pinned, digest-verified static binary in an overlay, with the Anthrop...

sbx/paperclip-mixin

Docker, Inc

Paperclip as a mixin — Node 24, the pinned paperclipai CLI and its built UI in an overlay, with...

sbx/devin-enterprise-mixin

Docker, Inc

Devin CLI by Cognition, pinned to a Devin Enterprise deployment (<org>.devinenterprise.com). Laye...

sbx/goose

Docker, Inc

goose, the open-source agent now under the Linux Foundation's Agentic AI Foundation, as a mixin: ...

sbx/droid-sessions

Docker, Inc

Factory Droid host-shared session history

sbx/hermes-agent-sessions

Docker, Inc

Retain Hermes Agent session state on the host across sandbox removal

sbx/devin-sessions

Docker, Inc

Devin host sessions

sbx/docker-tcp

Docker, Inc

Serve the sandbox's Docker Engine on TCP port 2375 and publish it on the host's loopback, so a Do...

sbx/cosmos-db-emulator

Docker, Inc

Runs the Azure Cosmos DB emulator (vNext, API for NoSQL) on the sandbox's Docker Engine, with the...

sbx/agentmesh

Docker, Inc

Runs an agentmesh-node inside the sandbox and registers it as an MCP server with the agent.