Official agent skill

Sandbox Next

Build or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview).

OfficialApache-2.0Auto-check passed

Install Sandbox Next

skills CLI

$ npx skills add cloudflare/skills --skill sandbox-next -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install cloudflare/skills sandbox-next --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/cloudflare/skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/sandbox-next .claude/skills/sandbox-next && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "sandbox-next" agent skill from https://github.com/cloudflare/skills/tree/main/skills/sandbox-next into .claude/skills/sandbox-next/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sandbox-next", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/cloudflare/skills/tree/main/skills/sandbox-next

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add cloudflare/skills --skill sandbox-next -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install cloudflare/skills sandbox-next --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cloudflare/skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/sandbox-next .agents/skills/sandbox-next && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "sandbox-next" agent skill from https://github.com/cloudflare/skills/tree/main/skills/sandbox-next into .agents/skills/sandbox-next/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sandbox-next", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add cloudflare/skills --skill sandbox-next -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install cloudflare/skills sandbox-next --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cloudflare/skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/sandbox-next .cursor/skills/sandbox-next && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "sandbox-next" agent skill from https://github.com/cloudflare/skills/tree/main/skills/sandbox-next into .cursor/skills/sandbox-next/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sandbox-next", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/cloudflare/skills.git --path skills/sandbox-next

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add cloudflare/skills --skill sandbox-next -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install cloudflare/skills sandbox-next --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cloudflare/skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/sandbox-next .gemini/skills/sandbox-next && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "sandbox-next" agent skill from https://github.com/cloudflare/skills/tree/main/skills/sandbox-next into .gemini/skills/sandbox-next/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sandbox-next", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install cloudflare/skills sandbox-next

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add cloudflare/skills --skill sandbox-next -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/cloudflare/skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/sandbox-next .github/skills/sandbox-next && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "sandbox-next" agent skill from https://github.com/cloudflare/skills/tree/main/skills/sandbox-next into .github/skills/sandbox-next/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sandbox-next", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add cloudflare/skills --skill sandbox-next -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install cloudflare/skills sandbox-next --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cloudflare/skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/sandbox-next .opencode/skills/sandbox-next && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "sandbox-next" agent skill from https://github.com/cloudflare/skills/tree/main/skills/sandbox-next into .opencode/skills/sandbox-next/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sandbox-next", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: sandbox-next
GitHub stars: 3k
Used in: 2 other repos
Token cost: ~1.7k tokens
SKILL.md length: 535 words
Files: 3 (incl. references)
Skills in repo: 16
Repo updated: Oct 1, 2026
First seen: Oct 7, 2026
Licence: Apache-2.0

At a glance

Build or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview).

Works in 4 steps: Gate — confirm the package line → Contract — non-negotiables → Retrieve — open the doc for the task → …
SKILL.md covers 1. Gate — confirm the package…, 2. Contract — non-negotiables, 3. Retrieve — open the doc for… and 4. Before you ship
Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Sandbox Next is an agent skill from cloudflare/skills, published by the product's own GitHub organization. Build or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-migrate-to-next when porting a stable app.

Its SKILL.md is about 1.7k tokens, which your agent loads only when the skill is triggered. The skill folder holds 3 other files, including reference files (for example `references/api-quick-ref.md` and `references/examples.md`).

It works with Cloudflare. The repository describes itself as: Skills for teaching agents how to build on Cloudflare. The licence is Apache-2.0.

Example prompts

“/sandbox-next”

Workflow steps

4 steps, taken from the step headings in SKILL.md.

Gate — confirm the package line
Contract — non-negotiables
Retrieve — open the doc for the task
Before you ship

What it can do on your machine

Read from SKILL.md and the folder at commit 41e0d19. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are typescript).
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
- developers.cloudflare.com
- github.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Sandbox Next loads about 1.7k tokens when it runs, and up to ~2.4k if it reads all its reference files. Until then it costs about 39 tokens; SKILL.md has 535 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~39
When it runs · the whole SKILL.md, loaded when a task matches: ~1.7k
With references · SKILL.md plus every file in references/, read only if the agent opens them: ~2.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from cloudflare/skills at commit 41e0d19, republished under its Apache-2.0 licence (© cloudflare). 535 words, ~1,675 tokens.

Download SKILL.mdSave it as .claude/skills/sandbox-next/SKILL.md (or your agent's skills folder). This skill also uses 2 other files; get the full folder from GitHub.

name: sandbox-next
description: Build or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-migrate-to-next when porting a stable app.

Sandbox SDK — `@next` (1.0 preview)

Isolated Linux environments on Cloudflare Containers, driven from Workers.

Prefer preview docs and installed @next types over memory. APIs change; this skill is a gate, a contract, and a retrieval map—not a full manual.

We recommend new projects on this line. Apps still on the default package use sandbox-stable. Port only when asked, via sandbox-migrate-to-next.

1. Gate — confirm the package line

Before writing code, inspect the app:

Check	Must match
npm dependency	`@cloudflare/sandbox@next` (or another preview tag)
Container image	Same line (e.g. `cloudflare/sandbox:next`, `next-python`)

If you find…	Action
Default `@cloudflare/sandbox` (no `@next`)	Stop. Load `sandbox-stable`. Do not apply this skill’s APIs.
User wants to port stable → `@next`	Stop. Load `sandbox-migrate-to-next`.
Self-deployed bridge only	Bridge is not on the 1.0 preview line yet. Keep bridge on stable package + image. Bridge (stable)

Never mix an @next Worker package with a stable container image (or the reverse).

Skills install: Agent setup · cloudflare/skills

2. Contract — non-negotiables

sandbox.exec(argv) takes an argv list and resolves when the process starts. It returns a handle, not a finished command result.
Collect results with handle methods: output(), logs(), waitForExit(), waitForPort(), waitForLog(), kill(signal?).
No implicit shell. Shell syntax needs an explicit shell, e.g. ["/bin/bash", "-lc", script].
Each launch is independent. A cd / export in one exec is not visible to the next. Pass cwd and env per launch, or one shell script.
Process handles have no stdin. Interactive use → terminals (createTerminal + connect).
Local wait timeout / AbortSignal cancel the wait only. They do not kill the process. Use kill or exec’s remote timeout.
getProcess / listProcesses / getTerminal / listTerminals do not start a container; they return null / [] when none is up.
Process and terminal IDs belong to the current container, not forever to a sandbox ID. For work that must survive replace, store the full job (argv, cwd, env, app state)—not only an id.
Non-secret config only in setEnvVars / launch env. Live credentials stay in the Worker; use outbound handlers when the sandbox calls external APIs.
Do not invent removed stable APIs (gitCheckout on core, string-exec completion, session execution, sandbox.terminal(request)).
Do not use one retry loop for every error (see Errors docs).

Minimal shape:

import { getSandbox, proxyToSandbox, Sandbox } from "@cloudflare/sandbox";

export { Sandbox };

const sandbox = getSandbox(env.Sandbox, "user-123");
const process = await sandbox.exec(["python3", "-c", "print(2 + 2)"]);
const result = await process.output({ encoding: "utf8" });
// result.stdout, result.exitCode

Task-specific API documentation: references/api-quick-ref.md

Examples index (next branch): references/examples.md

Show full SKILL.md (170 more words)Show less

3. Retrieve — open the doc for the task

Fetch the page before implementing. Installed @next types win over guesses.

You need to…	Open
Orient / choose preview	1.0 preview overview
First Worker, wrangler, Dockerfile	Get started
`exec`, handles, readiness, durability	Process execution
Process API signatures	Processes API
Sandbox ID vs container vs sleep/destroy	Lifecycle
`cwd` / `env` / `setEnvVars`	Environment
Interactive PTY / browser terminal	Terminals · Terminals API
Python/JS code interpreter	Interpreter · Interpreter API
Extensions model	Extensions
Error classes and recovery	Errors · Errors API
Common failures	Troubleshooting
API hub	API reference
Files, mounts, backups, ports, tunnels, `proxyToSandbox`	Main docs for shared surfaces (ignore stable-only session/transport/`sandbox.terminal`): Files · Storage / mounts · Ports · Tunnels · Backups · Outbound traffic · Expose services · Production
Example apps	examples on `next`
Still on stable package	`sandbox-stable` · Main Sandbox docs
Porting an existing stable app	`sandbox-migrate-to-next` · Migrate

4. Before you ship

Lockfile and Dockerfile on the same @next line
Typecheck against installed @next types
No live secrets in sandbox env
Production preview hostnames need wildcard DNS on a custom domain when using those URL patterns

Files

SKILL.md and 2 other files (references) in skills/sandbox-next of cloudflare/skills.

SKILL.md
references/api-quick-ref.md
references/examples.md

Open the folder on GitHubat commit 41e0d19

Used in 2 other repositories

We found 2 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 2 other GitHub owners. This page covers the copy in cloudflare/skills, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Sandbox Next next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Sandbox Next compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Sandbox Next this skillcloudflare/skills	3k	2 repos	~1.7k	Automated safety check: Pass	Apache-2.0	6 days ago
Cloudflare Browser Renderingcloudflare/moltworker	9.9k	—	~742	Automated safety check: Pass	Apache-2.0	5 mo ago
Star Office UI Setupringhyacinth/Star-Office-UI	7.5k	—	~1.3k	Automated safety check: Pass	MIT	7 mo ago
Cloudflarehodgef/apiker	127	7 repos	~2.2k	Automated safety check: Pass	MIT	1 mo ago
Webhome Extension Builderwebhtv/webhtv	1.7k	—	~2.8k	Automated safety check: Pass	GPL-3.0	today
Golivemikehasa/golive-skill	1.2k	—	~13k	Automated safety check: Notes	MIT	3 days ago

Similar skills

Cloudflare Browser Rendering
cloudflare/moltworker
Official
Drives headless Chrome through Cloudflare Browser Rendering over a CDP WebSocket to take screenshots, navigate and scrape pages, and record multi-page videos.
9.9k GitHub stars~742 tokensUpdated 5 mo ago
Productivity & AutomationAuto-check passed
Star Office UI Setup
ringhyacinth/Star-Office-UI
Sets up Star Office UI, a pixel-art office dashboard that shows AI agent states, lets other agents join and can be opened from a phone or a public link.
7.5k GitHub stars~1.3k tokensUpdated 7 mo ago
Agent WorkflowsAuto-check passed
Cloudflare
hodgef/apiker
Comprehensive Cloudflare platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), feature flags (Flagship), networking (Tunnel, Spectrum), security (WAF…
127 GitHub starsUsed in 7 repos~2.2k tokens
DevOps & CloudAuto-check passed
Webhome Extension Builder
webhtv/webhtv
Build, review, debug, reverse-engineer, and package WebHome injected extension scripts for FongMi/WebHome App WebView pages.
1.7k GitHub stars~2.8k tokensUpdated today
SecurityAuto-check passed
Golive
mikehasa/golive-skill
Take an agent-written app from repo to live production on the user's OWN accounts, with providers they choose (hosting, database, auth, payments, email, domain/DNS).
1.2k GitHub stars~13k tokensUpdated 3 days ago
Backend & APIsAuto-check: notes
Webhome Homepage Builder
webhtv/webhtv
Build, review, debug, reverse-engineer data sources for, and package FongMi/WebHome custom homepage single-file HTML.
1.7k GitHub stars~3.8k tokensUpdated today
Frontend & DesignAuto-check passed

Questions about Sandbox Next

What does Sandbox Next do?

Build or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Sandbox Next is an agent skill from cloudflare/skills, published by the product's own GitHub organization.0 preview).

How do I install Sandbox Next in Claude Code?

Run `npx skills add cloudflare/skills --skill sandbox-next -a claude-code`. Or copy the skill folder (skills/sandbox-next in cloudflare/skills) into .claude/skills/sandbox-next in your project. Claude Code loads it when a task matches its description.

How do I install Sandbox Next in Codex?

Run `npx skills add cloudflare/skills --skill sandbox-next -a codex`. Or copy the skill folder (skills/sandbox-next in cloudflare/skills) into .agents/skills/sandbox-next in your project. Codex loads it when a task matches its description.

Can I use Sandbox Next in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add cloudflare/skills --skill sandbox-next -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/sandbox-next, .gemini/skills/sandbox-next, .github/skills/sandbox-next and .opencode/skills/sandbox-next in your project.

What does Sandbox Next need to run?

SKILL.md names no scripts, command-line tools or credentials: Sandbox Next is instructions for the agent only.

Does Sandbox Next access the network?

SKILL.md names 2 domains. As links in the text: developers.cloudflare.com and github.com. This is read from the text; nothing was executed.

Is Sandbox Next safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Sandbox Next use?

Sandbox Next is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Sandbox Next use?

About 1.7k tokens (SKILL.md is roughly 6.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 710 tokens, read only when the agent opens those files.

What are the alternatives to Sandbox Next?

Skills that share tags, products or a category with Sandbox Next: Cloudflare Browser Rendering (cloudflare/moltworker, 9.9k stars), Star Office UI Setup (ringhyacinth/Star-Office-UI, 7.5k stars), Cloudflare (hodgef/apiker, 127 stars) and Webhome Extension Builder (webhtv/webhtv, 1.7k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Sandbox Next?

cloudflare (a GitHub organization, an official publisher) maintains it in cloudflare/skills, which has 2,999 GitHub stars. The repository holds 16 skills in this directory. The repository was last updated on October 1, 2026.

Source: cloudflare/skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Sandbox Next

Install Sandbox Next

Facts

At a glance

What it does

Example prompts

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Sandbox SDK — `@next` (1.0 preview)

1. Gate — confirm the package line

2. Contract — non-negotiables

3. Retrieve — open the doc for the task

4. Before you ship

Files

Used in 2 other repositories

Compare with similar skills

Similar skills

Cloudflare Browser Rendering

Star Office UI Setup

Cloudflare

Webhome Extension Builder

Golive

Webhome Homepage Builder

More from cloudflare/skills

Turnstile Spin

Nextjs On Cloudflare

Agents SDK

Durable Objects

Cloudflare One Migrations

Workers Best Practices

Questions about Sandbox Next

Install Sandbox Next

Facts

At a glance

What it does

Example prompts

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Sandbox SDK — @next (1.0 preview)

1. Gate — confirm the package line

2. Contract — non-negotiables

3. Retrieve — open the doc for the task

4. Before you ship

Files

Used in 2 other repositories

Compare with similar skills

Similar skills

More from cloudflare/skills

Related

Questions about Sandbox Next

Sandbox SDK — `@next` (1.0 preview)