Description
Refuse a sandbox bypass whose commands already escape through sandbox.excludedCommands, naming the form that escapes without the flag
What it can do
Reach level 1 — reads What does this mean? →
reads settingsother: $.modEvents.emit
Can see: Bash calls
Raw API calls (3)
- $.modEvents.emit
- $.session.cwd
- $.settings.read
Static check passed with warnings on Claude Code 2.1.303.
Install
$/plugin marketplace add bendrucker/claude $/plugin install sandbox Check the repo for the exact name.
Details
- Repository
- bendrucker/claude
- Path in repo
- plugins/sandbox
- License
- MIT
- Last updated
- Oct 19, 2026
- First seen
- Oct 20, 2026
- Last scanned
- Oct 20, 2026
Related mods — reach level 1
- ruflo-ruos ★ 76,952
- openviking-memory ★ 39,271
- cc-arcade--davila7 ★ 32,551
- 2048 ★ 32,551
Capability data is machine-generated by static analysis and may be incomplete. A SAFE badge is not a guarantee — read the code before installing anything with broad access. Not affiliated with Anthropic.
Found a mistake in this listing or verdict? Report an issue →