docker-sandboxes-network-credentials

スキルの内容

A Docker-authored skill about what a Docker Sandboxes sandbox may reach on the network and which credentials it uses. It walks the agent through sbx policy commands for global and per-sandbox egress rules, where deny wins over allow, and sbx secret commands for service secrets, secrets resolved at run time and private registry credentials. It explains that a proxy injects stored credentials on matching domains so the raw value stays outside the sandbox, and warns that OAuth passthrough can expose real tokens and that a leaked credential must be rotated.

できること

詳細