alsk1992/sandbox
src/skills/bundled/sandbox/SKILL.md
Visual HTML canvas sandbox for agent-driven UI and live previews
$ install --global
skillsauthnpx skillsauth add alsk1992/cloddsbot sandboxInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 4, 2026, 4:16 AM4.5s2 files scanned
SKILL.md
- name:
- sandbox
- description:
- Visual HTML canvas sandbox for agent-driven UI and live previews
Sandbox - Visual Canvas
Push HTML content to a live-updating canvas server for visual previews, dashboards, and agent-driven UI.
Commands
/sandbox start - Start the canvas server (returns URL)
/sandbox push <html> - Push HTML content to the canvas
/sandbox reset - Reset canvas to blank state
/sandbox screenshot - Take a screenshot of the current canvas
/sandbox status - Show canvas server status and settings
Environment Variables
| Variable | Description |
|----------|-------------|
| CANVAS_ALLOW_JS_EVAL | Enable JavaScript evaluation in canvas (default: false) |
| ALLOW_UNSAFE_SANDBOX | Enable unsafe sandbox mode (default: false) |
Examples
/sandbox start
/sandbox push <h1>Hello World</h1><p>Live preview</p>
/sandbox screenshot
/sandbox status
/sandbox reset
How It Works
/sandbox startlaunches a local HTTP server that serves the canvas page/sandbox push <html>sends HTML to the canvas, rendered in real time/sandbox screenshotcaptures the current canvas state as an image/sandbox resetclears all HTML, CSS, and JS from the canvas/sandbox statusshows whether the server is running, the URL, and content sizes
Related Skills
alsk1992/yoink
testing
VerifiedTrustedCommunity
Play Yoink capture-the-flag game on Base - yoink the flag, check scores, compete for trophy
141SKILL.mdUpdated Apr 4, 2026
alsk1992/x-research
research
VerifiedTrustedCommunity
X/Twitter research via Composio — search, threads, profiles, watchlists
141SKILL.mdUpdated Apr 4, 2026
alsk1992/whale-tracking
development
VerifiedTrustedCommunity
Monitor whale trades on Polymarket and crypto chains (Solana, ETH, Polygon, ARB, Base, OP)
141SKILL.mdUpdated Apr 4, 2026
alsk1992/webhooks
development
VerifiedTrustedCommunity
Webhook management with HMAC signing and rate limiting
141SKILL.mdUpdated Apr 4, 2026