pi-sandbox-profile

Sandbox profiles for Pi: open/intro-sec/engineering with file-tool enforcement and telemetry

Package details

← Back
extension

Install pi-sandbox-profile from npm and Pi will load the resources declared by the package manifest.

npm repohome report
$ pi install npm:pi-sandbox-profile
Package
pi-sandbox-profile
Version
1.0.0
Published
Mar 3, 2026
Downloads
52/mo · 7/wk
Author
lajarre
License
MIT
Types
extension
Size
26.4 KB
Dependencies
1 dependency · 1 peer
Pi manifest JSON
{
  "extensions": [
    "./index.ts"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

pi-extension-sandbox-profile

Sandbox profiles for Pi with:

  • profile switching (/sandbox-profile, --sandbox-profile)
  • bash sandboxing via @anthropic-ai/sandbox-runtime
  • file-tool enforcement for read / write / edit
  • denied-network telemetry and protected-path blocking

Install

pi install /path/to/pi-sandbox-profile

Or from Git once published:

pi install git:github.com/<owner>/pi-sandbox-profile

Quick start

Create profile files:

  • ~/.pi/agent/sandbox-profiles/intro-sec.json
  • ~/.pi/agent/sandbox-profiles/engineering.json

Optional protected paths override:

  • ~/.pi/agent/sandbox-profiles/protected-paths.json

Then start Pi with the extension loaded and pick a profile:

/sandbox-profile intro-sec

Configuration

Profiles directory

~/.pi/agent/sandbox-profiles/

  • intro-sec.json
  • engineering.json
  • telemetry/network-deny-YYYY-MM-DD.jsonl
  • protected-paths.json

Commands

  • /sandbox — show active sandbox/profile info
  • /sandbox-profile — show current profile
  • /sandbox-profile <name> — switch profile

CLI flags

  • --sandbox-profile <name>
  • --no-sandbox

Prerequisites

  • Pi runtime
  • @anthropic-ai/sandbox-runtime supported platform (macOS/Linux)
  • For best security posture, run under a dedicated Unix user and rely primarily on Unix permissions