unsafe-sandbox
Rules for unsafe Rust and the L3 behavioral process harness.
Skill by KalarisLabs
Chalk Labs
Need help deploying unsafe-sandbox?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/kalarislabs-unsafe-sandbox
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/unsafe-sandbox
What's inside
- Skill name
unsafe-sandbox- Description
- Rules for unsafe Rust and the L3 behavioral process harness. Use when adding unsafe blocks, FFI, sandbox features, differential replay, or canary credentials.
- License
- Apache-2.0
- Instructions
- 11 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
# Unsafe and sandbox - `unsafe` only in `skill-doctor-sandbox`. - Every block has `// SAFETY:` naming the invariant. - Default binary does not enable `sandbox`. Missing L3 → coverage reduction, not a crash. - Canaries are fake host-injected values, never production secrets. - Differential replay: vary clock / hostname / CI env; divergence is a finding. - No Firecracker daemon on the default path. - Sandbox tests: `#[cfg(feature = "sandbox")]`. Do not fail Windows required CI because L3 is absent.
From KalarisLabs/Skill-Doctor, Apache-2.0.
More from KalarisLabs/Skill-Doctor
- 0.596score
rust-idioms
KalarisLabs
Everyday Rust engineering for Skill Doctor — errors, ownership, clippy, APIs, iterators.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
ci-cd
KalarisLabs
GitHub Actions, required checks, TestMu, OS matrix, and merge gates for Skill Doctor.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
rust-skills
leonardomso
Comprehensive Rust coding guidelines with 265 rules across 26 categories.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
rust-invariants
KalarisLabs
Nine non-negotiable Skill Doctor product invariants.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
rust-workspace
KalarisLabs
Cargo workspace layout, crate boundaries, and dependency policy for Skill Doctor.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
rust-testing
KalarisLabs
How to write Skill Doctor tests — unit, integration, CLI, fixtures, determinism, additive-only.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
rust-perf
KalarisLabs
Rust performance and memory optimization for Skill Doctor L1.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
project-context
KalarisLabs
Skill Doctor product and architecture context.
SkillBFreshness: B★ 13Claude Code +9 - 0.591score
neutralize-sd11
KalarisLabs
SD-11 scanner-mediated injection — neutralize untrusted skill bytes before any model; additive-only scoring.
SkillBFreshness: B★ 13Claude Code +9 - 0.591score
release-publish
KalarisLabs
Pre-publish and publish path for crates.io, npm installer, GitHub Releases, SBOM.
SkillBFreshness: B★ 13Claude Code +9 - 0.591score
yara-rules
KalarisLabs
Author and compile YARA-X rules for SDTM-v1.
SkillBFreshness: B★ 13Claude Code +9 - 0.591score
cli-sarif
KalarisLabs
Skill Doctor CLI UX, flags, exit codes, text/JSON/SARIF reports.
SkillBFreshness: B★ 13Claude Code +9
Signals
- Stars
- 13
- Forks
- 1
- Open issues
- 30
- Last commit (this folder)
- Sep 10, 2026 (1 month ago)
- Last release
- Sep 12, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- Repository
- github.com/KalarisLabs/Skill-Doctor
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from KalarisLabs
- 0.596score
project-context
KalarisLabs
Skill Doctor product and architecture context.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
ci-cd
KalarisLabs
GitHub Actions, required checks, TestMu, OS matrix, and merge gates for Skill Doctor.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
rust-testing
KalarisLabs
How to write Skill Doctor tests — unit, integration, CLI, fixtures, determinism, additive-only.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
rust-idioms
KalarisLabs
Everyday Rust engineering for Skill Doctor — errors, ownership, clippy, APIs, iterators.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
rust-invariants
KalarisLabs
Nine non-negotiable Skill Doctor product invariants.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
rust-perf
KalarisLabs
Rust performance and memory optimization for Skill Doctor L1.
SkillBFreshness: B★ 13Claude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get unsafe-sandbox running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
unsafe-sandbox skill. Agent Mart. https://agentmart.dev/skills/kalarislabs-unsafe-sandbox (last updated 2026-10-24)