sandbox
by Ben Drucker · ★ 18 · updated yesterday
Refuse a sandbox bypass whose commands already escape through sandbox.excludedCommands, naming the form that escapes without the flag
Install
/plugin marketplace add bendrucker/claude/plugin install sandbox@bendruckerThen run /reload-plugins or start a new session. Requires Claude Code 2.1.287+.
What it hooks into
From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.
- Events
session.starttool.call- API calls
$.modEvents.emit$.session.cwd$.settings.read- Can see
Bash calls- Reach
- level 1 of 3 reads settingsother: $.modEvents.emit
Origin
- How it got here
- Automated scan of public GitHub repos, via the CC0 dataset awesome-claude-code-mods (scan of ).
- Repository
- github.com/bendrucker/claude
- Path in repo
plugins/sandbox- Source commit
06ba25bthe exact code the scan read- Author
- Ben Drucker @bendrucker
- License
- MIT
- First published
- Last pushed
- First listed here
Name and description come from the mod's own manifest. We link to the code; we don't host it, and it stays under its author's license.
More from bendrucker/claude
auto-mode
bendrucker/claude
Enhancements for Claude Code auto mode
github
bendrucker/claude
GitHub workflow, Actions monitoring, and rulesets management
gitlab
bendrucker/claude
GitLab workflow best practices and glab CLI usage
herdr
bendrucker/claude
Drive the herdr terminal workspace manager: panes, tabs, workspaces, and sibling coding agents
load
bendrucker/claude
Pace Claude's heavy work to the machine it runs on, with configurable hard caps
mod-events
bendrucker/claude
Structured event log for mods: $.modEvents.emit writes per-session OTel log records as JSONL
plan
bendrucker/claude
Planning mode guidelines and context injection
run-command
bendrucker/claude
Pick a reply's ! suggestion by click or digit to fill it into the shell prompt
session-limit
bendrucker/claude
Warn the model mid-turn as the 5-hour or 7-day limit nears
zsh
bendrucker/claude
Quote the bash habits that misfire under zsh before the Bash tool runs them, and explain zsh errors after