the-agency-ai/.claude/skills/sandbox-create
.claude/skills/sandbox-create/SKILL.md
Create a new experimental command, hook, rule, tool, or script in your sandbox
$ install --global
skillsauthnpx skillsauth add the-agency-ai/the-agency .claude/skills/sandbox-createInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 20, 2026, 3:22 PM7.4s1 file scanned
SKILL.md
- description:
- Create a new experimental command, hook, rule, tool, or script in your sandbox
<!--
Flag #62/#63: allowed-tools removed. Inherits Bash(*) from
.claude/settings.json. Restricting to specific subcommand patterns at the
skill level silently blocks agents on permission prompts the agent cannot
see — see dispatch #171 for the devex incident that surfaced this trap.
-->
Sandbox Create
Scaffold a new item in your sandbox with collision detection.
Arguments
$ARGUMENTS is <type> <name> where:
- type:
command,hook,hookify,tool,script - name: kebab-case name (no extension)
Steps
-
Parse arguments: Extract type and name. Validate name matches
^[a-z0-9-]+$. -
Detect engineer: Scan
usr/*/directories. If only one, use it. If multiple, match againstgit config user.name. -
Collision check: Search ALL locations for the same name:
- Shared:
.claude/commands/,.claude/hooks/,.claude/hookify.*,claude/tools/ - All sandboxes:
usr/*/claude/commands/,usr/*/claude/hooks/,usr/*/claude/hookify/,usr/*/tools/,usr/*/scripts/ - If collision found: report WHERE and ask to continue or rename
- Shared:
-
Scaffold the item based on type with appropriate template (command .md, hook .sh, hookify .md, tool .ts, script .sh).
-
Make executable (hook and script types only).
-
Print result:
Created: usr/<engineer>/<path>/<name>.<ext> Next: edit the file, then activate it: /sandbox-activate <name>
Related Skills
the-agency-ai/src/claude/skills/worktree-sync
business
VerifiedTrustedCommunity
Sync worktree with master — merge, copy settings, run sandbox-sync, report changes
5SKILL.mdUpdated Apr 22, 2026
the-agency-ai/src/claude/skills/worktree-list
tools
VerifiedTrustedCommunity
List all git worktrees with status info (branch, clean/dirty, deps)
5SKILL.mdUpdated Apr 22, 2026
the-agency-ai/src/claude/skills/worktree-delete
tools
VerifiedTrustedCommunity
Remove a git worktree and optionally delete its branch
5SKILL.mdUpdated Apr 22, 2026
the-agency-ai/src/claude/skills/worktree-create
development
VerifiedTrustedCommunity
Create a new git worktree with dedicated branch and bootstrapped dev environment
5SKILL.mdUpdated Apr 22, 2026