pi-sandbox-profile
v1.0.0
Published
Sandbox profiles for Pi: open/intro-sec/engineering with file-tool enforcement and telemetry
Maintainers
Readme
pi-extension-sandbox-profile
Sandbox profiles for Pi with:
- profile switching (
/sandbox-profile,--sandbox-profile) - bash sandboxing via
@anthropic-ai/sandbox-runtime - file-tool enforcement for
read/write/edit - denied-network telemetry and protected-path blocking
Install
pi install /path/to/pi-sandbox-profileOr from Git once published:
pi install git:github.com/<owner>/pi-sandbox-profileQuick start
Create profile files:
~/.pi/agent/sandbox-profiles/intro-sec.json~/.pi/agent/sandbox-profiles/engineering.json
Optional protected paths override:
~/.pi/agent/sandbox-profiles/protected-paths.json
Then start Pi with the extension loaded and pick a profile:
/sandbox-profile intro-secConfiguration
Profiles directory
~/.pi/agent/sandbox-profiles/
intro-sec.jsonengineering.jsontelemetry/network-deny-YYYY-MM-DD.jsonlprotected-paths.json
Commands
/sandbox— show active sandbox/profile info/sandbox-profile— show current profile/sandbox-profile <name>— switch profile
CLI flags
--sandbox-profile <name>--no-sandbox
Prerequisites
- Pi runtime
@anthropic-ai/sandbox-runtimesupported platform (macOS/Linux)- For best security posture, run under a dedicated Unix user and rely primarily on Unix permissions
