All Claude Code modsbendrucker/claude
sandbox
Refuse a sandbox bypass whose commands already escape through sandbox.excludedCommands, naming the form that escapes without the flag
sandbox reaches L1 (reads) by its classified calls and passed claude plugin validate with warnings on Claude Code 2.1.303.
- Events hooked: 2
- API methods referenced: 3
- Access from classified calls: L1, reads: reads settings
- Calls in a namespace that is not in the Claude Code 2.1.302 core table: 1 (
$.modEvents.emit), full access unknown - Static scan, not a runtime test
Install hint
/plugin install sandbox --marketplace bendrucker/claudeFrom the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.
Access
L1 Readsreads settings, other: $.modEvents.emitValidation
Passed with warnings on Claude Code 2.1.303View the source on GitHub Back to the list
What the scan recorded
- Observed events
- Bash calls
- Hooks
session.start, tool.call {tool=Bash}- API calls
$.modEvents.emit, $.session.cwd, $.settings.read- Validation on 2.1.303
- Passed with warnings
- Scanned revision
06ba25b71479- Marketplace warnings
- bendrucker
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.
More from bendrucker/claude
- auto-modeEnhancements for Claude Code auto mode
- githubGitHub workflow, Actions monitoring, and rulesets management
- gitlabGitLab workflow best practices and glab CLI usage
- herdrDrive the herdr terminal workspace manager: panes, tabs, workspaces, and sibling coding agents
- loadPace Claude's heavy work to the machine it runs on, with configurable hard caps
- mod-eventsStructured event log for mods: `$.modEvents.emit` writes per-session OTel log records as JSONL
- planPlanning mode guidelines and context injection
- run-commandPick a reply's `! <command>` suggestion by click or digit to fill it into the shell prompt
- session-limitWarn the model mid-turn as the 5-hour or 7-day limit nears
- zshQuote the bash habits that misfire under zsh before the Bash tool runs them, and explain zsh errors after
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/bendrucker--claude--sandbox/)
[](https://mods.aidojo.si/mods/bendrucker--claude--sandbox/)