Sindoq

Skill HappyHackingSpace/skills/skills/sindoq

Agent Skills for Happy Hacking Space's open-source security tools. Compatible with Claude Code, OpenAI Codex, Gemini CLI, and Cursor.

Install

npx -y skills add HappyHackingSpace/skills --skill sindoq

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

4 stars4 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Execute code in sandboxed environments using Docker, Podman, Wasmer, gVisor, Firecracker, Kubernetes, or cloud providers. Use when the user needs to safely run untrusted code, build AI code execution pipelines, or set up isolated sandbox environments.

SKILL.md

3.2 KB, as published. Nobody here has run it

sindoq - AI Sandbox

sindoq (means "box" in Kurdish) is a Go SDK for sandboxed code execution. One API, any provider.

Installation

go get github.com/happyhackingspace/sindoq

Quick Start

One-liner Execution

result, err := sindoq.Execute(ctx, `print("Hello, World!")`)
fmt.Println(result.Stdout) // Hello, World!

With Specific Provider

sb, err := sindoq.Create(ctx, sindoq.WithProvider("docker"))
if err != nil {
    log.Fatal(err)
}
defer sb.Stop(ctx)

result, err := sb.Execute(ctx, `console.log("Hello")`, sindoq.WithLanguage("JavaScript"))
fmt.Println(result.Stdout)

Streaming Output

sb, err := sindoq.Create(ctx, sindoq.WithProvider("docker"))
defer sb.Stop(ctx)

err = sb.ExecuteStream(ctx, code, func(e *executor.StreamEvent) error {
    if e.Type == executor.StreamStdout {
        fmt.Print(e.Data)
    }
    return nil
})

Async Execution

results, err := sb.ExecuteAsync(ctx, code)
// Do other work...
result := <-results
fmt.Println(result.Stdout)

Providers

Provider	Type	Use Case
`docker`	Local	Development, CI/CD
`podman`	Local	Rootless containers
`wasmer`	Local	Cross-platform WASM sandbox (Linux, macOS, Windows)
`nsjail`	Local	Ultra-fast process isolation (~5ms, Linux only)
`gvisor`	Local	Strong isolation, syscall filtering (Linux only)
`firecracker`	Local	Maximum isolation (microVMs, Linux only)
`landlock`	Local	Kernel-level sandboxing via Landlock LSM (Linux 5.13+)
`seatbelt`	Local	Kernel-level sandboxing via sandbox-exec (macOS)
`kubernetes`	Cloud	Scalable workloads
`vercel`	Cloud	Serverless execution
`e2b`	Cloud	AI code interpreter

Provider Configuration

// Docker
sb, _ := sindoq.Create(ctx, sindoq.WithDockerConfig(sindoq.DockerConfig{
    Host: "unix:///var/run/docker.sock",
}))

// Vercel
sb, _ := sindoq.Create(ctx, sindoq.WithVercelConfig(sindoq.VercelConfig{
    Token: os.Getenv("VERCEL_TOKEN"),
}))

// E2B
sb, _ := sindoq.Create(ctx, sindoq.WithE2BConfig(sindoq.E2BConfig{
    APIKey: os.Getenv("E2B_API_KEY"),
}))

// Wasmer (cross-platform)
sb, _ := sindoq.Create(ctx, sindoq.WithWasmerConfig(sindoq.WasmerConfig{
    WasmerPath: "wasmer",
    TimeLimit:  30,
}))

// Seatbelt (macOS)
sb, _ := sindoq.Create(ctx, sindoq.WithSeatbeltConfig(sindoq.SeatbeltConfig{
    EnableNetwork: false,
}))

Features

Multi-provider support: Docker, Podman, Wasmer, nsjail, gVisor, Firecracker, Landlock, Seatbelt, Kubernetes, Vercel, E2B
Auto language detection: Automatically detects programming language from code
Streaming output: Real-time stdout/stderr streaming
Async execution: Non-blocking execution with channels
Resource limits: Control CPU, memory, and execution time
File system access: Read/write files in sandbox environments

References

Repository: https://github.com/HappyHackingSpace/sindoq