← Browse
ca-sandbox
arbiterForge ★ 152
ca-sandbox pulls untrusted repositories into ephemeral, isolated Docker containers with no host-filesystem access and configurable network policies, then tears them down after use. It caches container images by dependency-manifest hash, uses nixpacks for multi-language detection with a generated-Dockerfile fallback, and enforces security via read-only root, capability drops, and host-initiated file extraction only.
Install
> /plugin marketplace add arbiterForge/codeArbiter/tree/HEAD/plugins/ca-sandbox
> /plugin install ca-sandbox
Source: https://github.com/arbiterForge/codeArbiter/tree/HEAD/plugins/ca-sandbox
What it's made of
5 commands · 2 skills
- Commands
- 5
- Agents
- 0
- Skills
- 2
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (arbiterForge).