sindoq — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited sindoq (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
sindoq (means "box" in Kurdish) is a Go SDK for sandboxed code execution. One API, any provider.
go get github.com/happyhackingspace/sindoqresult, err := sindoq.Execute(ctx, `print("Hello, World!")`)
fmt.Println(result.Stdout) // Hello, World!sb, err := sindoq.Create(ctx, sindoq.WithProvider("docker"))
if err != nil {
log.Fatal(err)
}
defer sb.Stop(ctx)
result, err := sb.Execute(ctx, `console.log("Hello")`, sindoq.WithLanguage("JavaScript"))
fmt.Println(result.Stdout)sb, err := sindoq.Create(ctx, sindoq.WithProvider("docker"))
defer sb.Stop(ctx)
err = sb.ExecuteStream(ctx, code, func(e *executor.StreamEvent) error {
if e.Type == executor.StreamStdout {
fmt.Print(e.Data)
}
return nil
})results, err := sb.ExecuteAsync(ctx, code)
// Do other work...
result := <-results
fmt.Println(result.Stdout)| Provider | Type | Use Case |
|---|---|---|
docker | Local | Development, CI/CD |
podman | Local | Rootless containers |
wasmer | Local | Cross-platform WASM sandbox (Linux, macOS, Windows) |
nsjail | Local | Ultra-fast process isolation (~5ms, Linux only) |
gvisor | Local | Strong isolation, syscall filtering (Linux only) |
firecracker | Local | Maximum isolation (microVMs, Linux only) |
landlock | Local | Kernel-level sandboxing via Landlock LSM (Linux 5.13+) |
seatbelt | Local | Kernel-level sandboxing via sandbox-exec (macOS) |
kubernetes | Cloud | Scalable workloads |
vercel | Cloud | Serverless execution |
e2b | Cloud | AI code interpreter |
// Docker
sb, _ := sindoq.Create(ctx, sindoq.WithDockerConfig(sindoq.DockerConfig{
Host: "unix:///var/run/docker.sock",
}))
// Vercel
sb, _ := sindoq.Create(ctx, sindoq.WithVercelConfig(sindoq.VercelConfig{
Token: os.Getenv("VERCEL_TOKEN"),
}))
// E2B
sb, _ := sindoq.Create(ctx, sindoq.WithE2BConfig(sindoq.E2BConfig{
APIKey: os.Getenv("E2B_API_KEY"),
}))
// Wasmer (cross-platform)
sb, _ := sindoq.Create(ctx, sindoq.WithWasmerConfig(sindoq.WasmerConfig{
WasmerPath: "wasmer",
TimeLimit: 30,
}))
// Seatbelt (macOS)
sb, _ := sindoq.Create(ctx, sindoq.WithSeatbeltConfig(sindoq.SeatbeltConfig{
EnableNetwork: false,
}))~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.