Skip to content
← Registry
Trust Report

docker-sandbox

Create and manage Docker sandboxed VM environments for safe agent execution. Use when running untrusted code, exploring packages, or isolating agent workloads. Supports Claude, Codex, Copilot, Gemini, and Kiro agents with network proxy controls.

75
REJECTED
Format: openclawScanner: v0.8.0Duration: 10msScanned: 8d ago · May 31, 4:04 AMSource →
Embed this badge
AgentVerus REJECTED 75AgentVerus REJECTED 75AgentVerus REJECTED 75
[![AgentVerus](https://agentverus.ai/api/v1/skill/56813673-2a9a-441e-aa15-89719ad60a0a/badge)](https://agentverus.ai/skill/56813673-2a9a-441e-aa15-89719ad60a0a)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/56813673-2a9a-441e-aa15-89719ad60a0a/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"56813673-2a9a-441e-aa15-89719ad60a0a","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/56813673-2a9a-441e-aa15-89719ad60a0a/trust

Category Scores

62
Permissions
100
Injection
87
Dependencies
94
Behavioral
65
Content
80
Code Safety

Findings (9)

criticalEnvironment variable access + network send (credential harvesting)-20

Code accesses process.env and makes outbound network requests. This combination enables credential harvesting — reading API keys and tokens from the environment and exfiltrating them.

const proxy = process.env.HTTPS_PROXY || process.env.HTTP_PROXY;

Review the code for legitimate use. If this is instructional, consider adding a safety disclaimer.

code-safetyASST-05
highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: exec

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highCapability contract mismatch: inferred system modification is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: global install

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: create --name <name> <agent> <workspace

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://docs.docker.com/desktop/features/sandbox/

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumSystem modification detected (inside code block)-6

Found system modification pattern: "npm install -g"

docker sandbox exec my-sandbox npm install -g some-package

Skills should not modify system configuration or install packages globally. Bundle required dependencies.

behavioralASST-03
mediumHigh-risk workflow lacks explicit safety boundaries-15

The skill performs or enables higher-risk operations but does not define explicit safety boundaries describing what it must not do.

No safety boundary patterns found alongside high-risk capability language

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk.

https://api.example.com/data

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

http://host.docker.internal:3128

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04