Claude Code mod
sandbox
Refuse a sandbox bypass whose commands already escape through sandbox.excludedCommands, naming the form that escapes without the flag
Install
/plugin marketplace add bendrucker/claude
/plugin install sandbox@bendruckerMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L1Reads: reads settings, other: $.modEvents.emit
- Sees
- Bash calls
- Hooks
session.starttool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- bendrucker/claude
- Folder
plugins/sandbox- Marketplace
bendrucker- Author
- Ben Drucker
- Type
- Workflow mods
- License
- MIT
- Last updated
- 31 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is sandbox?
Refuse a sandbox bypass whose commands already escape through sandbox.excludedCommands, naming the form that escapes without the flag It is a mod for Claude Code, from bendrucker/claude on GitHub.
What can the sandbox mod access?
Its widest reach is "reads" (reads settings, other: $.modEvents.emit). It sees Bash calls. Like any mod, it runs with your permissions.
How do I install sandbox?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add bendrucker/claude and then /plugin install sandbox@bendrucker.
Is sandbox popular?
bendrucker/claude has 18 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 31 October 2026.
More workflow mods
ruflo-adr
80kruvnet/ruflo
ADR lifecycle management — create, index, reconcile, supersede, check compliance, and link Architecture Decision Records to code via AgentDB hierarchical store + causal edges (supersedes/amends/depends-on/related)
zsh
18bendrucker/claude
Quote the bash habits that misfire under zsh before the Bash tool runs them, and explain zsh errors after
jev
22Nasrallah-AL/jev-cli
Cheap, fast, typed AI judgments inside Claude Code via the jevctl CLI (verify, screen, find, classify, extract, rerank, match, route, ask, batch), plus verbatim Jev-guided context compaction that replaces the built-in summary.
latex-math
7atomashevic/claude-latex-math
Typesets the LaTeX math in Claude's replies as images in the terminal, through the kitty graphics protocol
md-prompt
9nogu66/md-prompt
Paints Markdown onto Claude Code's prompt box as you type: fenced code becomes a syntax-highlighted card (even before you close the fence), and inline code, bold, italic, lists, task lists, quotes, tables, links and headings are styled. Paint only, your text is never changed.
ruflo-autopilot
80kruvnet/ruflo
Autonomous /loop-driven task completion with learning, prediction, and progress tracking — wraps 10 autopilot_* MCP tools (status/enable/disable/config/reset/log/progress/learn/history/predict)
Browse the most popular Claude Code mods, all workflow mods, or the skills and MCP server directories.