docker-sandbox — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited docker-sandbox (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this when a task needs Docker: building an image, running docker compose, or testing a container. Many sandboxes (V8 isolates, restricted microVMs) can't run Docker at all — Box is a full VM with Docker preinstalled, so it just works.
docker build, docker run, compose stacks.curl -fsSL https://box.ascii.dev/install | sh, then box login "$BOX_API_KEY" --json.
box_id="$(box new --json | jq -r 'select(.event == "ready") | .id')"
box ssh "$box_id" -- bash -s < ./clone-and-build.sh # git clone + docker build
box ssh "$box_id" -- "cd /project && docker compose up -d"
box ssh "$box_id" -- "host 8080" # expose the running container
box delete "$box_id" --jsonEU-only; 100 active VMs soft cap; disk-level snapshots (containers don't survive stop/resume — restart compose after resume).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.