sandbox-guard

Creates Docker sandbox configurations that isolate untrusted OpenClaw skills from the host system.

When to use it

Use when preparing to run an untrusted skill with a repeatable isolation profile.

Give it a skill's name and permissions; it generates a Dockerfile, docker run command, and docker-compose.yml for review, writing files to a dedicated output folder only after confirmation.