plugin-sandbox-setup
Configure plugin sandboxing with vm2 or isolated-vm for secure plugin execution.
npx skills add a5c-ai/babysitter --skill plugin-sandbox-setup --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Plugin Sandbox Setup Configure plugin sandboxing for security. ## Generated Patterns ```typescript import ivm from 'isolated-vm'; export async function runInSandbox(code: string, context: Record<string, unknown>) { const isolate = new ivm.Isolate({ memoryLimit: 128 }); const vmContext = isolate.createContextSync(); const jail = vmContext.global; for (const [key, value] of Object.entries(context)) { jail.setSync(key, new ivm.ExternalCopy(value).copyInto()); } const script = isolate.compileScriptSync(code); const result = await script.run(vmContext, { timeout: 5000 }); isolate.dispose(); return result; } ``` ## Target Processes - plugin-architecture-implementation - mcp-server-security-hardening
- Generated Patterns
- Target Processes
What does the plugin-sandbox-setup skill do?
Configure plugin sandboxing with vm2 or isolated-vm for secure plugin execution.
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill plugin-sandbox-setup --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.
