sbx/codex-app-server

Docker, Inc

Runs sshd in the sandbox and pre-populates `authorized_keys` from the host's forwarded SSH agent,...

sbx/shell-credentials

Docker, Inc

Eight provider credentials for an agentless sandbox, resolved by the sandbox proxy.

sbx/crush-mixin

Docker, Inc

Charm's multi-provider AI coding agent as a mixin -- the Crush binary in an overlay, with proxy-m...

sbx/grok-mixin

Docker, Inc

xAI's terminal-based coding agent as a mixin — the CLI in an overlay, with the xAI credential a...

sbx/cursor-mixin

Docker, Inc

Cursor's agent CLI as a mixin — the agent in an overlay, with the Cursor credential (API key or...

sbx/github-clone

Docker, Inc

Clones a GitHub repository into the sandbox at create time, using the gh CLI with a proxy-managed...

sbx/cloudsmith

Docker, Inc

Adds Cloudsmith package/artifact management to any agent via the official cloudsmith CLI, wired t...

sbx/nanoclaw

Docker, Inc

NanoClaw host + nested per-session agent containers inside a Docker Sandbox micro-VM.

sbx/neovim

Docker, Inc

Installs Neovim at a pinned release and injects the bundled ~/.config/nvim into the sandbox.

sbx/opencode-mixin

Docker, Inc

OpenCode as a mixin -- node and the CLI in an overlay, with seven optional proxy-managed provider...

sbx/devin-enterprise

Docker, Inc

Devin CLI by Cognition, pinned to a Devin Enterprise deployment (<org>.devinenterprise.com). Sign...

sbx/antigravity-mixin

Docker, Inc

Google's agy terminal coding agent as a mixin -- the CLI in an overlay, with the proxy-managed Ge...

sbx/snyk-evo-ads

Docker, Inc

Installs Snyk AgentScan, Agent Guard, and/or Snyk Studio, selected via SNYK_COMPONENTS, directly ...

sbx/gitea

Docker, Inc

Wires a Gitea access token into the sandbox proxy so git-over-HTTPS and the Gitea API both authen...

sbx/qemu

Docker, Inc

Registers QEMU user-mode emulators with the kernel's binfmt_misc via Docker (tonistiigi/binfmt) s...

sbx/gstack-mixin

Docker, Inc

Garry Tan's Claude Code skill pack as a mixin — the gstack checkout at a pinned commit with its...

sbx/open-interpreter-mixin

Docker, Inc

Open Interpreter as a mixin -- the agent's own uv tool installation in an overlay, with the proxy...

sbx/trivy

Docker, Inc

Aqua's open source vulnerability scanner — sandboxed because security scanners shouldn't be abl...

sbx/openclaw-mixin

Docker, Inc

OpenClaw as a mixin -- Node, the pinned openclaw release and the Chromium the browser tool uses, ...

sbx/openhands-mixin

Docker, Inc

OpenHands as a mixin — the `uv`-installed CLI and its managed CPython in an overlay, with the A...

sbx/nanobot-mixin

Docker, Inc

nanobot as a mixin -- the agent's own uv tool installation in an overlay, with the proxy-managed ...

sbx/panw-siem-telemetry

Docker, Inc

Ships sandbox observability (process, network, file, and agent-activity logs) to a SIEM HTTP even...

sbx/ecc

Docker, Inc

The agent-harness optimization content pack for Claude Code: rules, agents, commands, and — whe...

sbx/droid-mixin

Docker, Inc

Factory's Droid CLI as a mixin — the upstream install in an overlay, with the Factory credentia...

sbx/jfrog-xray

Docker, Inc

Installs the JFrog CLI (jf), pre-wired to your JFrog Platform, so agents can run Xray security & ...

sbx/dynatrace

Docker, Inc

Wires an agent to a Dynatrace SaaS environment through the official hosted Dynatrace Remote MCP s...

sbx/smolagents

Docker, Inc

Installs Hugging Face smolagents in an isolated Python virtual environment and exposes the smolag...

sbx/firecrawl

Docker, Inc

Adds live web search/scrape/crawl to any agent via the firecrawl-py SDK, wired to Firecrawl's clo...

sbx/gitguardian

Docker, Inc

Installs the GitGuardian CLI (ggshield) with proxy-injected API-key auth for api.gitguardian.com ...

sbx/amp

Docker, Inc

The frontier coding agent.