lightning-sandboxes

Manage ephemeral virtual machines for secure code execution via Lightning AI.

5|Updated Jul 3, 2026
One-click install
npx skills add https://github.com/Lightning-AI/skills --skill lightning-sandboxes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: lightning-sandboxes
Source: https://github.com/Lightning-AI/skills/tree/main/lightning-sandboxes
Command: npx skills add https://github.com/Lightning-AI/skills --skill lightning-sandboxes

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires lightning-sdk, websocket-client.

What problem does it solve?

This skill solves the challenge of executing untrusted or experimental code in a safe, isolated environment without risking your local machine or requiring complex infrastructure setup.

Core Features & Use Cases

  • Isolated Execution: Run code in ephemeral, gVisor-backed VMs with configurable network egress policies.
  • Persistence & Snapshots: Create persistent devboxes that support auto-snapshots, allowing you to pause, resume, and branch your development environments.
  • Use Case: Use this to safely execute generated code, test scripts in a clean environment, or spin up a custom container image from a registry to poke around without affecting your local system.

Quick Start

Use the lightning-sandboxes skill to create a new persistent development environment named devbox with Python 3.13 support.

Frequently Asked Questions about lightning-sandboxes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run untrusted code in an isolated cloud sandbox?▼

Run untrusted code in an isolated cloud sandbox using ephemeral, gVisor-backed virtual machines that provide a secure execution environment without risking your local machine.

Can I create persistent development environments with auto-snapshots in cloud VMs?▼

Yes, you can create persistent development environments in cloud VMs that support auto-snapshots, allowing you to pause, resume, and branch your custom devbox configurations.

How does network egress policy enforcement work for ephemeral virtual machines?▼

Network egress policy enforcement for ephemeral virtual machines works by applying configurable network rules within the isolated, gVisor-backed cloud execution environment to control external access.

Do I need lightning-sdk and teamspace API credentials to manage cloud sandboxes?▼

Yes, you need the lightning-sdk and appropriate teamspace-scoped API credentials to interface with the Lightning AI cloud infrastructure and manage cloud sandbox lifecycles.

What are the limitations of using ephemeral VMs for experimental code execution?▼

A limitation of using ephemeral VMs for experimental code execution is that they are temporary by nature, requiring snapshot creation if you need to persist your development environment state.