trailofbits/claude-code-devcontainer
Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.
ARCHETYPE
Minimalist
Lean instructions, few tools, tiny context tax. Lets the model think.
Copy this rig
# review before running: this installs third-party code
$ npx degit trailofbits/claude-code-devcontainer/.claude ./rig-claude-code-devcontainer # inspect, then merge into .claude/ MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.
{
"permissions": {
"deny": [
"Read(.devcontainer/**)"
]
}
} Permissions
deny (1)
Read(.devcontainer/**)
ask (0)
—
allow (0)
—
Similar rigs
multica-ai/andrej-karpathy-skills
A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
Minimalist 723 tok ·
shareAI-lab/learn-claude-code
Bash is all you need - A nano claude code–like 「agent harness」, built from 0 to 1
Minimalist 156 tok ·
tt-a1i/archify
Agent skill for beautiful, verifiable architecture, workflow, sequence, data-flow, and lifecycle diagrams—self-contained HTML with motion and crisp export.
Minimalist 484 tok ·
ayghri/i-have-adhd
A skill to stop your coding agent from burying the answer. ADHD-friendly output.
Minimalist 1.4k tok ·