# Sandbox Source Intake

> >

- **Type:** Skill
- **Install:** `agentstack add skill-arnie016-codex-prompt-templates-sandbox-source-intake`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Arnie016](https://agentstack.voostack.com/s/arnie016)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Arnie016](https://github.com/Arnie016)
- **Source:** https://github.com/Arnie016/codex-prompt-templates/tree/main/skills/sandbox-source-intake
- **Website:** https://github.com/Arnie016/codex-prompt-templates

## Install

```sh
agentstack add skill-arnie016-codex-prompt-templates-sandbox-source-intake
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Sandbox Source Intake

Use this before trusting a fresh repo.

## Clone Policy

- Use shallow clones: `git clone --depth 1  sources/`.
- Prefer a small curated set over bulk cloning.
- Check `du -sh sources` after each batch.
- Skip or sparse-clone very large repos unless needed.

## Inspection Order

1. README and license.
2. Manifests: `package.json`, `pyproject.toml`, `Cargo.toml`, `go.mod`.
3. Install scripts, Dockerfiles, GitHub Actions.
4. Tool/MCP configs and permissions.
5. Source entry points.

## Red Flags

- raw executable zip/binary download as primary install
- curl-piped shell
- postinstall scripts that fetch remote code
- account/session control without a narrow use case
- broad filesystem or shell tools exposed through MCP
- unclear license

## Output

```md
# Source Intake Report
Repo:
Local path:
Disk size:
License:
Runtime:
Install risk:
Useful patterns:
Do not run:
Next action:
```

Then use `$repo-intelligence-brief` for safe repos.

## Validation

- Clone depth, disk size, license, runtime, and install risk are recorded.
- No untrusted install scripts, binaries, package installs, or servers were run.
- Risky repos are marked inspiration-only until reviewed.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Arnie016](https://github.com/Arnie016)
- **Source:** [Arnie016/codex-prompt-templates](https://github.com/Arnie016/codex-prompt-templates)
- **License:** MIT
- **Homepage:** https://github.com/Arnie016/codex-prompt-templates

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-arnie016-codex-prompt-templates-sandbox-source-intake
- Seller: https://agentstack.voostack.com/s/arnie016
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.