bwrap_sandbox skillA
bwrap_sandbox is agent-read markdown (skill) from soliplex/soliplex: This skill runs Python in a bubblewrap sandbox. Each turn gets a scratch working directory that lasts for the duration of that turn, plus read-only access to uploaded files mounted under '/sandbox/volumes'..
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# Sandbox
This skill runs Python in a bubblewrap sandbox.
Use it to compute results from files.
## When to use the sandbox
Use the sandbox if **any** of these is true:
- The task references one or more files uploaded
under `/sandbox/volumes/thread` or `/sandbox/volumes/room`.
- The task asks for a number, count, table, or other value derived from data.
- You were about to state a computed result without actually computing it.
Do NOT use the sandbox if **any** of these is true:
- The question is about definitions, explanations, or concepts.
- The answer is already stated in the conversation.
- The task is to write code for the user to run, not to execute code yourself.
- The task is vague ("analyze the files", "take a look")
with no concrete question. Ask the user what they want to know
before running anything.
## Sandbox file layout
- `/sandbox/work/` — read/write scratch space inside the sandbox.
Intermediate artifacts written by a script go here.
- `/sandbox/volumes/thread/` — read-only;
files the user uploaded to this thread. Usually the inputs for the task.
- `/sandbox/volumes/room/` — read-only;
files shared across the room. Often contain rules, formulas,
…Read the whole file at its exact version.
How to install
mdr add soliplex/soliplex/bwrap_sandbox@git:20260826.013b484mdr add soliplex/soliplex/bwrap_sandbox@sha256:cb778ceee566088bPin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_k2xiqq6io4ckua2p)
0 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260826.013b484 latest | 2026-08-26 | 013b484 | 8,338 B | A | view · diff |
| git:20260825.2c66fc3 | 2026-08-25 | 2c66fc3 | 6,808 B | A | view · diff |
| git:20260424.a95cebb | 2026-04-24 | a95cebb | 5,730 B | A | view · diff |
| git:20260421.3d8a773 | 2026-04-21 | 3d8a773 | 4,041 B | A | view · diff |
| git:20260421.236338a | 2026-04-21 | 236338a | 3,998 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (8338 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
soliplex/soliplex · 15 stars · license MIT · pushed 2026-09-24 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_k2xiqq6io4ckua2p GET https://markdownregistry.com/api/v1/resolve?ref=soliplex/soliplex/bwrap_sandbox GET https://markdownregistry.com/api/v1/blob/cb778ceee566088b0918abd20e017d21836c6f023fa1dfc4db1ddb311949721e
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.