sbx/git-ssh-sign

Docker, Inc

Configures git to sign commits using the SSH key forwarded from the host's SSH agent.

sbx/trivy

Docker, Inc

Aqua's open source vulnerability scanner — sandboxed because security scanners shouldn't be abl...

sbx/cloudsmith

Docker, Inc

Adds Cloudsmith package/artifact management to any agent via the official cloudsmith CLI, wired t...

sbx/gitlab-ssh

Docker, Inc

Appends a GitLab instance's SSH host keys to ~/.ssh/known_hosts so git clone/push/pull over SSH w...

sbx/mise

Docker, Inc

The polyglot dev-tool version manager (https://mise.jdx.dev) — installs the mise CLI and wires ...

sbx/crush-mixin

Docker, Inc

Charm's multi-provider AI coding agent as a mixin -- the Crush binary in an overlay, with proxy-m...

sbx/picoclaw-mixin

Docker, Inc

PicoClaw as a mixin — the pinned, SHA256-verified static binary in an overlay, with the Anthrop...

sbx/neovim

Docker, Inc

Installs Neovim at a pinned release and injects the bundled ~/.config/nvim into the sandbox.

sbx/smolagents

Docker, Inc

Installs Hugging Face smolagents in an isolated Python virtual environment and exposes the smolag...

sbx/antigravity-mixin

Docker, Inc

Google's agy terminal coding agent as a mixin -- the CLI in an overlay, with the proxy-managed Ge...

sbx/trivy-mixin

Docker, Inc

Aqua's open source vulnerability scanner as a mixin — the pinned, SHA256-verified release binar...

sbx/grafana

Docker, Inc

Adds the official Grafana MCP server (mcp-grafana) plus the grafana-client Python library to an a...

sbx/docker-agent-mixin

Docker, Inc

Docker Agent as a mixin -- the binary in an overlay at its self-updateable /opt home, with eight ...

sbx/amp-mixin

Docker, Inc

The frontier coding agent as a mixin -- Amp's own installer, the Amp credential, and its egress. ...

sbx/vale

Docker, Inc

Installs the Vale prose linter from a pinned GitHub release.

sbx/devin-mixin

Docker, Inc

Devin CLI by Cognition as a mixin -- the CLI and its auth wrapper in an overlay, with the passthr...

sbx/qemu

Docker, Inc

Registers QEMU user-mode emulators with the kernel's binfmt_misc via Docker (tonistiigi/binfmt) s...

sbx/packages-through-sfw

Docker, Inc

Installs Socket Firewall Free and routes npm, pip, pip3, and python3 -m pip commands through sfw ...

sbx/zeroclaw-mixin

Docker, Inc

ZeroClaw as a mixin — the pinned, digest-verified static binary in an overlay, with the Anthrop...

sbx/panw-siem-telemetry

Docker, Inc

Ships sandbox observability (process, network, file, and agent-activity logs) to a SIEM HTTP even...

sbx/panw-endpoint-enforcement

Docker, Inc

Marks agent processes as running inside a sandbox so a host-side endpoint security policy engine ...

sbx/snyk-evo-ads-kit

Docker, Inc

Installs Snyk AgentScan, Agent Guard, and/or Snyk Studio, selected via SNYK_COMPONENTS, directly ...

sbx/paperclip-mixin

Docker, Inc

Paperclip as a mixin — Node 22, the pinned paperclipai CLI and its built UI in an overlay, with...

sbx/glab-kit

Docker, Inc

Installs the GitLab CLI (glab) with proxy-injected personal access token auth for gitlab.com, so ...

sbx/gitea-kit

Docker, Inc

Wires a Gitea access token into the sandbox proxy so git-over-HTTPS and the Gitea API both authen...

sbx/mend-ai-security-kit

Docker, Inc

>-

sbx/gitguardian-kit

Docker, Inc

Installs the GitGuardian CLI (ggshield) with proxy-injected API-key auth for api.gitguardian.com ...

sbx/lighthouse-kit

Docker, Inc

Google Lighthouse CLI for auditing performance, accessibility, SEO, and best practices — headless.