Help us improve
Share bugs, ideas, or general feedback.
From ralph-town
Daytona sandbox security. Use for token handling, credential security, full paths in SSH.
npx claudepluginhub spences10/ralph-town --plugin ralph-townHow this skill is triggered — by the user, by Claude, or both
Slash command
/ralph-town:sandbox-securityThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
SSH sessions have broken PATH. ALWAYS use full paths:
Provides secure environment variable management to prevent secrets exposure in Claude sessions, terminals, logs, or git commits.
Guides Claude Code sandbox configuration for filesystem/network isolation, OS enforcement (bubblewrap/Seatbelt), proxies, escape hatches, and troubleshooting via docs-management delegation.
Enables secure execution of untrusted Python/Node.js code, git operations, and scripts in persistent Linux containers on Cloudflare edge using Workers SDK.
Share bugs, ideas, or general feedback.
SSH sessions have broken PATH. ALWAYS use full paths:
| Tool | Path |
|---|---|
| git | /usr/bin/git |
| gh | /usr/bin/gh |
| bun | /root/.bun/bin/bun |
| ls/cat/echo | /bin/ls, /bin/cat, /bin/echo |
NEVER embed tokens in URLs - they leak to process list, logs, errors.
# BAD - token visible in ps, logs, error messages
/usr/bin/git clone https://$GH_TOKEN@github.com/owner/repo.git
# GOOD - use credential helper
/usr/bin/git config --global credential.helper store
/bin/echo "https://oauth2:$GH_TOKEN@github.com" > ~/.git-credentials
/bin/chmod 600 ~/.git-credentials
/usr/bin/git clone https://github.com/owner/repo.git
Env vars via --env are visible to ALL processes in sandbox:
env command lists everything/proc/*/environ exposes all process env vars$GH_TOKENMitigations:
Team-lead configures credentials BEFORE spawning teammate:
# $GH_TOKEN expands LOCALLY (double quotes!)
ssh <token>@ssh.app.daytona.io "
/usr/bin/git config --global credential.helper store &&
/bin/echo 'https://oauth2:$GH_TOKEN@github.com' > ~/.git-credentials &&
/bin/chmod 600 ~/.git-credentials
"