visirlabs/visir:2026-09-10_cf4f5a5

schemaVersion: "2"
kind: sandbox
name: visir
description: Runs security checks on the sandbox before granting access
extends: claude
sandbox:
    entrypoint:
        - /bin/bash
    command:
        default:
            - -c
            - |
              set -eu
              curl -fsSL https://raw.githubusercontent.com/visirlabs/visir-kits/main/entrypoint.sh -o /tmp/visir-entrypoint.sh
              exec bash /tmp/visir-entrypoint.sh
        interactive:
            - -c
            - |
              set -eu
              curl -fsSL https://raw.githubusercontent.com/visirlabs/visir-kits/main/entrypoint.sh -o /tmp/visir-entrypoint.sh
              exec bash /tmp/visir-entrypoint.sh
permissions:
    network:
        allow:
            - api.github.com:443
            - github.com:443
            - raw.githubusercontent.com:443
            - release-assets.githubusercontent.com:443
            - archive.ubuntu.com:80
            - security.ubuntu.com:80
            - download.docker.com:443
            - docs.docker.com:443
            - registry.npmjs.org:443
            - api.anthropic.com:443
            - platform.claude.com:443
            - downloads.claude.ai:443
            - claude.com:443
            - mcp-proxy.anthropic.com:443
            - bridge.claudeusercontent.com:443