How does srt differ from the built-in /sandbox command?

The built-in /sandbox is optimized for interactive sessions. The srt utility is designed for CLI/autonomous runs where you need strict, per-project configuration without escape hatches.

What is the best strategy for network allowlists?

Start with a minimal allowlist including Anthropic's API and language-specific registries (like npm or crates.io), adding GitHub access only if your build requires git-based dependencies.

Can I use srt on both macOS and Linux?

Yes, srt utilizes platform-specific primitives like macOS seatbelt and Linux bubblewrap to provide lightweight isolation without the overhead of containers.

Can I use MCP servers within the srt sandbox?

Yes, by adding the specific MCP domains to the network allowlist and granting write access to the necessary local cache directories used by the Claude CLI.

Why do I need to enable allowPty in my srt config?

Interactive CLI tools require pseudo-terminal access for keyboard input handling and terminal UI rendering; enabling allowPty prevents terminal initialization errors.

Sandbox Runtime (SRT) Guide

Name: Sandbox Runtime (SRT) Guide
Author: rbergman

byrbergman

•

Seguridad y Pruebas

Provides patterns and configurations for the Sandbox Runtime (srt) to secure autonomous Claude Code CLI runs.

Acerca de

The srt skill is a specialized guide for implementing OS-level sandboxing using the Sandbox Runtime (srt) utility. While Claude Code offers a built-in /sandbox command for interactive sessions, this skill focuses on securing autonomous, batch, and CI/CD workflows where strict filesystem and network isolation are required. It provides production-ready JSON configurations for various programming ecosystems like Rust, Go, and Node.js, ensuring that even when Claude runs with dangerously-skip-permissions, your local environment remains protected from unauthorized data exfiltration or filesystem modification.

Características Principales

Per-project sandbox configuration strategies via .srt.json files
Ecosystem-specific network allowlists for Rust, Go, and Node.js registries
1 GitHub stars
Advanced PTY configuration patterns for running interactive CLI tools within a sandbox
Best practices for stateless Claude runs in CI/CD and autonomous environments
OS-level filesystem and network restriction patterns using macOS seatbelt and Linux bubblewrap

Casos de Uso

Securing autonomous Claude agents running with the --dangerously-skip-permissions flag
Isolating AI-driven code generation and testing within specific local directories
Implementing fine-grained network access controls for build tools and dependency managers

Acerca de

Características Principales

Per-project sandbox configuration strategies via .srt.json files
Ecosystem-specific network allowlists for Rust, Go, and Node.js registries
1 GitHub stars
Advanced PTY configuration patterns for running interactive CLI tools within a sandbox
Best practices for stateless Claude runs in CI/CD and autonomous environments
OS-level filesystem and network restriction patterns using macOS seatbelt and Linux bubblewrap

Casos de Uso

Securing autonomous Claude agents running with the --dangerously-skip-permissions flag
Isolating AI-driven code generation and testing within specific local directories
Implementing fine-grained network access controls for build tools and dependency managers