docker/sbx-kit-trivy

Docker, Inc.

Aqua's open source vulnerability scanner — sandboxed because security scanners shouldn't be abl...

docker/sbx-kit-openhands-canvas

Docker, Inc.

OpenHands Agent Canvas - the browser UI + agent-server - running as a self-contained Docker sandb...

docker/sbx-kit-antigravity-mixin

Docker, Inc.

Google's agy terminal coding agent as a mixin -- the CLI in an overlay, with the proxy-managed Ge...

docker/sbx-kit-kiro

Docker, Inc.

Kiro CLI by AWS, with interactive device-flow authentication.

docker/sbx-kit-devin-mixin

Docker, Inc.

Devin CLI by Cognition as a mixin -- the CLI and its auth wrapper in an overlay, with the passthr...

docker/sbx-kit-hermes-agent-mixin

Docker, Inc.

Nous Research's self-improving agent as a mixin — the Hermes install in an overlay, with the An...

docker/sbx-kit-ecc

Docker, Inc.

The agent-harness optimization content pack for Claude Code: rules, agents, commands, and — whe...

docker/sbx-kit-grok-mixin

Docker, Inc.

xAI's terminal-based coding agent as a mixin — the CLI in an overlay, with the xAI credential a...

docker/sbx-kit-dynatrace

Docker, Inc.

Wires an agent to a Dynatrace SaaS environment through the official hosted Dynatrace Remote MCP s...

docker/sbx-kit-cloudsmith

Docker, Inc.

Adds Cloudsmith package/artifact management to any agent via the official cloudsmith CLI, wired t...

docker/sbx-kit-openclaw-mixin

Docker, Inc.

OpenClaw as a mixin -- Node, the pinned openclaw release and the Chromium the browser tool uses, ...

docker/sbx-kit-open-interpreter

Docker, Inc.

Natural language interface for your sandbox. Describe what you need; Open Interpreter writes and ...

docker/sbx-kit-gstack

Docker, Inc.

Claude Code with the gstack skill pack pre-installed: opinionated slash commands (/ship, /review,...

docker/sbx-kit-task

Docker, Inc.

Installs the Task CLI so sandbox agents can run Taskfiles.

docker/sbx-kit-nanoclaw

Docker, Inc.

NanoClaw host + nested per-session agent containers inside a Docker Sandbox micro-VM.

docker/sbx-kit-zeroclaw-mixin

Docker, Inc.

ZeroClaw as a mixin — the pinned, digest-verified static binary in an overlay, with the Anthrop...

docker/sbx-kit-trivy-mixin

Docker, Inc.

Aqua's open source vulnerability scanner as a mixin — the pinned, SHA256-verified release binar...

docker/sbx-kit-packages-through-sfw

Docker, Inc.

Installs Socket Firewall Free and routes npm, pip, pip3, and python3 -m pip commands through sfw ...

docker/sbx-kit-vale

Docker, Inc.

Installs the Vale prose linter from a pinned GitHub release.

docker/sbx-kit-paperclip-mixin

Docker, Inc.

Paperclip as a mixin — Node 22, the pinned paperclipai CLI and its built UI in an overlay, with...

docker/sbx-kit-jfrog-xray

Docker, Inc.

Installs the JFrog CLI (jf), pre-wired to your JFrog Platform, so agents can run Xray security & ...

docker/sbx-kit-grafana

Docker, Inc.

Adds the official Grafana MCP server (mcp-grafana) plus the grafana-client Python library to an a...

docker/sbx-kit-gitguardian

Docker, Inc.

Installs the GitGuardian CLI (ggshield) with proxy-injected API-key auth for api.gitguardian.com ...

docker/sbx-kit-smolagents

Docker, Inc.

Installs Hugging Face smolagents in an isolated Python virtual environment and exposes the smolag...

docker/sbx-kit-lighthouse

Docker, Inc.

Google Lighthouse CLI for auditing performance, accessibility, SEO, and best practices — headle...

docker/sbx-kit-t3code

Docker, Inc.

Build toolchain and the t3 npm package that T3 Code's SSH integration needs to run inside a sandb...

docker/sbx-kit-nanoclaw-mixin

Docker, Inc.

NanoClaw as a mixin -- the host process and its checkout in an overlay, with the Docker Hub, OneC...

docker/sbx-kit-kiro-mixin

Docker, Inc.

AWS's Kiro CLI as a mixin — kiro-cli and its device-flow launcher in an overlay, with the egres...

docker/sbx-kit-panw-siem-telemetry

Docker, Inc.

Ships sandbox observability (process, network, file, and agent-activity logs) to a SIEM HTTP even...

docker/sbx-kit-panw-endpoint-enforcement

Docker, Inc.

Marks agent processes as running inside a sandbox so a host-side endpoint security policy engine ...