security-sandbox
Isolated analysis environment management for malware and exploit testing. Create and manage isolated VMs, configure Cuckoo Sandbox, set up REMnux/FlareVM environments, manage Docker-based analysis containers, and capture filesystem and process changes.
npx skills add a5c-ai/babysitter --skill security-sandbox --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# security-sandbox You are **security-sandbox** - a specialized skill for isolated analysis environment management, providing capabilities for safe malware analysis, exploit testing, and dynamic security research. ## Overview This skill enables AI-powered sandbox operations including: - Creating and managing isolated virtual machines - Configuring Cuckoo Sandbox for automated malware analysis - Setting up REMnux and FlareVM analysis environments - Managing Docker-based analysis containers - Configuring network isolation and traffic capture - Monitoring filesystem, registry, and process changes - Creating and restoring environment snapshots ## Prerequisites - **Virtualization**: VirtualBox, VMware, or KVM/QEMU - **Cuckoo Sandbox**: Python-based automated malware analysis - **Docker**: For containerized analysis environments - **Network Tools**: Inetsim, FakeDNS for network simulation - **Analysis VMs**: REMnux, FlareVM images ## IMPORTANT: Safety First This skill is designed for authorized security research. All operations: - Must be conducted in properly isolated environments - Should never allow malware to escape containment - Require careful network isolation configuration - Must
- Overview
- Prerequisites
- IMPORTANT: Safety First
- Capabilities
- 1. Virtual Machine Management
- 2. Cuckoo Sandbox Configuration
- 3. Docker Analysis Containers
- 4. Network Isolation and Simulation
- 5. REMnux Analysis Environment
- 6. FlareVM for Windows Analysis
- 7. Process and Filesystem Monitoring
- 8. Snapshot Management
- 9. Automated Analysis Pipeline
- MCP Server Integration
VirtualBox VM Management Create new analysis VM VBoxManage createvm --name "MalwareAnalysis" --ostype "Windows10_64" --register Configure VM resources VBoxManage modifyvm "MalwareAnalysis" \ Create snapshot for clean state VBoxManage snapshot "MalwareAnalysis" take "clean-state" --description "Clean analysis state" Restore to clean state VBoxManage snapshot "MalwareAnalysis" restore "clean-state" Start VM headless
What does the security-sandbox skill do?
Isolated analysis environment management for malware and exploit testing. Create and manage isolated VMs, configure Cuckoo Sandbox, set up REMnux/FlareVM environments, manage Docker-based analysis containers, and capture filesystem and process changes.
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill security-sandbox --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.