Cloud Sandbox

Name: Cloud Sandbox
Author: ariana-dot-dev

DSecurity

Spin up an isolated cloud sandbox — a full root Ubuntu VM (4 vCPU / 8 GB / 80 GB), not a thin isolate or container — to run code, builds, installs, or shell commands off the user's machine. Billed per second, ~10x cheaper than E2B/Modal; Docker and every major toolchain preinstalled. Use whenever work should not touch the host filesystem.

2 stars
0 votes
0 copies
0 views
Added September 7, 2026

ai-agentspythonrustgojavarubyphpkotlinc++shellbash

Works with

claude code
cli
api

Security analysis

D42/100

criticalPipes output to a shell interpreter
mediumUses curl or wget to download content
criticalDownloads and executes remote scripts — classic supply chain attack

Pro shows the line behind each finding and how to fix it

Scanned September 7, 2026

npx -y skills add ariana-dot-dev/cloud-sandbox-vm-skills --skill cloud-sandbox --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Cloud Sandbox?

Add the live security badge to your README. It updates with every re-scan.

[![Security: D — Skills Directory](https://www.skillsdirectory.com/api/skills/ariana-dot-dev-cloud-sandbox/badge)](https://www.skillsdirectory.com/skills/ariana-dot-dev-cloud-sandbox)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: cloud-sandbox
description: Spin up an isolated cloud sandbox — a full root Ubuntu VM (4 vCPU / 8 GB / 80 GB), not a thin isolate or container — to run code, builds, installs, or shell commands off the user's machine. Billed per second, ~10x cheaper than E2B/Modal; Docker and every major toolchain preinstalled. Use whenever work should not touch the host filesystem.
---

# Cloud sandbox (Box)

Use this when a task needs to **run things in isolation**: building a repo, installing dependencies, executing generated code, or anything you'd rather not run on the user's real machine. Box gives a **real Linux machine**, not a V8 isolate (Cloudflare) or a stripped microVM — so `apt install`, Docker, long-lived processes, and an 80 GB disk all just work.

## When to prefer Box

- Host must stay clean / command is untrusted → isolate in a VM.
- Need Docker, system packages, or many runtimes → preinstalled.
- Cost matters at scale → 50 VMs × 240 h/mo ≈ **$432 (Box) vs ~$4,124 (E2B), ~$7,160 (Modal)**.

Prefer another tool for: sub-500 ms cold starts / 1000+ concurrent (E2B/Daytona/Modal), GPU (Modal), non-EU regions.

## Prereqs

`curl -fsSL https://box.ascii.dev/install | sh`, then `box login "$BOX_API_KEY" --json`.

## Recipe

```bash
box_id="$(box new --json | jq -r 'select(.event == "ready") | .id')"
box ssh "$box_id" -- bash -s < ./setup.sh
box ssh "$box_id" -- "cd /project && npm test"
box delete "$box_id" --json
```

## Preinstalled

Docker, Chrome, VS Code, GitHub CLI, Node/Bun/Deno, Python, Go, Rust, Java/Kotlin/Scala, Ruby, PHP, Erlang/Elixir, .NET, R, C/C++, ripgrep, jq, curl, ffmpeg, Claude Code, Codex. Hetzner CX33, dedicated IPv4, per-second billing.