How does srt differ from the built-in /sandbox command?

The built-in /sandbox is optimized for interactive sessions. The srt utility is designed for CLI/autonomous runs where you need strict, per-project configuration without escape hatches.

What is the best strategy for network allowlists?

Start with a minimal allowlist including Anthropic's API and language-specific registries (like npm or crates.io), adding GitHub access only if your build requires git-based dependencies.

Can I use srt on both macOS and Linux?

Yes, srt utilizes platform-specific primitives like macOS seatbelt and Linux bubblewrap to provide lightweight isolation without the overhead of containers.

Can I use MCP servers within the srt sandbox?

Yes, by adding the specific MCP domains to the network allowlist and granting write access to the necessary local cache directories used by the Claude CLI.

Why do I need to enable allowPty in my srt config?

Interactive CLI tools require pseudo-terminal access for keyboard input handling and terminal UI rendering; enabling allowPty prevents terminal initialization errors.

Sandbox Runtime (SRT) Guide

Name: Sandbox Runtime (SRT) Guide
Author: rbergman

byrbergman

•

セキュリティとテスト

Provides patterns and configurations for the Sandbox Runtime (srt) to secure autonomous Claude Code CLI runs.

The srt skill is a specialized guide for implementing OS-level sandboxing using the Sandbox Runtime (srt) utility. While Claude Code offers a built-in /sandbox command for interactive sessions, this skill focuses on securing autonomous, batch, and CI/CD workflows where strict filesystem and network isolation are required. It provides production-ready JSON configurations for various programming ecosystems like Rust, Go, and Node.js, ensuring that even when Claude runs with dangerously-skip-permissions, your local environment remains protected from unauthorized data exfiltration or filesystem modification.

主な機能

01Per-project sandbox configuration strategies via .srt.json files

02Ecosystem-specific network allowlists for Rust, Go, and Node.js registries

031 GitHub stars

04Advanced PTY configuration patterns for running interactive CLI tools within a sandbox

05Best practices for stateless Claude runs in CI/CD and autonomous environments

06OS-level filesystem and network restriction patterns using macOS seatbelt and Linux bubblewrap

ユースケース

01Securing autonomous Claude agents running with the --dangerously-skip-permissions flag

02Isolating AI-driven code generation and testing within specific local directories

03Implementing fine-grained network access controls for build tools and dependency managers

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add rbergman/dark-matter-marketplace srt

For use in Claude.ai and ChatGPT

主な機能

01Per-project sandbox configuration strategies via .srt.json files

02Ecosystem-specific network allowlists for Rust, Go, and Node.js registries

031 GitHub stars

04Advanced PTY configuration patterns for running interactive CLI tools within a sandbox

05Best practices for stateless Claude runs in CI/CD and autonomous environments

06OS-level filesystem and network restriction patterns using macOS seatbelt and Linux bubblewrap

ユースケース

01Securing autonomous Claude agents running with the --dangerously-skip-permissions flag

02Isolating AI-driven code generation and testing within specific local directories

03Implementing fine-grained network access controls for build tools and dependency managers