arc-skill-sandbox

Setup & Installation

What This Skill Does

Runs untrusted skills in a monitored environment before installation. Tracks filesystem access, environment variable reads, network connections, and subprocess calls during execution. Produces a JSON report with a safety verdict (SAFE / SUSPICIOUS / DANGEROUS).

When to Use It

• Testing a ClawHub skill before installing it on your real agent
• Checking if a downloaded script reads API keys or tokens
• Catching outbound network calls made by an unknown skill
• Running a skill with fake credentials to detect exfiltration attempts
• Generating a safety report before a team-wide skill rollout

Example Workflow

Here's how your AI assistant might use this skill in practice.

Test untrusted skills in an isolated environment before installing.