スキルを探す

Run Claude Code INSIDE a ca-sandbox box (`--with-claude`). Routed to when the user wants an agent loop running against an isolated, ephemeral sandbox rather than the host. Authenticates via an env-injected CLAUDE_CODE_OAUTH_TOKEN with no host bind of ~/.claude; the image pins the CLI and disables the autoupdater; HOME is backed by a named volume so the .claude state persists across restart. Five gated phases — posture, image, token, run, teardown. The hard default is offline or Anthropic-domains-only egress, and the token volume is NEVER co-mounted with an untrusted-code run; both are enforced, not advised.

日本語の概要は準備中です。原文の説明を表示しています。

Threat-model a sensitive design with STRIDE on request. Read-only analysis of threats, controls, and implementation constraints.

日本語の概要は準備中です。原文の説明を表示しています。

Trim transcript clutter to extend session lifetime — analyze, prune a copy, or toggle the after-each-turn service. Dry-run by default; gains land at resume/compaction, not the current turn.

日本語の概要は準備中です。原文の説明を表示しています。

Autonomous sprint — one interactive spec gate, then plan-to-PR execution with every auto-decision SMARTS-scored and logged. Hard gates remain true stops.

日本語の概要は準備中です。原文の説明を表示しています。

Show the project's current state at a glance — stage, open tasks, open questions, overrides since the last checkpoint, current branch. Read-only.

日本語の概要は準備中です。原文の説明を表示しています。

Run an opt-in deep codebase audit with persisted findings. Confirm cost before dispatch; filing and telemetry need separate approval.

日本語の概要は準備中です。原文の説明を表示しています。

Daily repo hygiene — review the day's repo state, then perform the cleanups under per-action confirmation. Fast-forward only, never destructive without a yes.

日本語の概要は準備中です。原文の説明を表示しています。

Verify the active host install, package, command ownership, enforcement, wrapper self-test, and active-dispatch coverage gap. Read-only.

日本語の概要は準備中です。原文の説明を表示しています。

The lifecycle gate for a local Codespace-equivalent sandbox. Routed to when the user invokes /ca-sandbox:sandbox to pull an untrusted repo into an ephemeral, host-FS-isolated Docker container, or any of the interaction commands (/ca-sandbox:sandbox-shell, /ca-sandbox:sandbox-exec, /ca-sandbox:sandbox-cp, /ca-sandbox:sandbox-destroy) against an existing box. Five gated phases — pre-flight, clone+build, isolated run, interact, teardown. The load-bearing invariant is structural: untrusted code in the box can never reach the host filesystem (no bind mount, no docker socket, never --privileged, cap-drop ALL, non-root, read-only root). Network defaults to offline; egress out is host-initiated only. Every object is labeled ca.sandbox=1 and torn down on exit.

日本語の概要は準備中です。原文の説明を表示しています。

The sanctioned task-board mutator — add a queued task, start one (flips to in-progress and stamps the date, minting a dotted ID on pick-up), or mark an in-progress task done. The only blessed write to open-tasks.md.

日本語の概要は準備中です。原文の説明を表示しています。

Exploratory spike on a throwaway branch — answer a named question with disposable code. Never merges; exits to a findings note or /ca-feature.

日本語の概要は準備中です。原文の説明を表示しています。

Watch a PR's CI to completion — diagnose on red, notify and offer the merge on green. Never auto-merges.

日本語の概要は準備中です。原文の説明を表示しています。

Verify the active host install, package, command ownership, enforcement, and harmless live-fire probe. Read-only.

日本語の概要は準備中です。原文の説明を表示しています。

Develop greenfield project context through a layered interview, preserve decisions, and initialize only after the required gates.

日本語の概要は準備中です。原文の説明を表示しています。

Periodic multi-reviewer sweep of the whole codebase — surfaces a triaged checkpoint report.

日本語の概要は準備中です。原文の説明を表示しています。

Investigate an unexplained defect or unexpected behavior without changing application code. Use for root-cause diagnosis and an evidence-backed handoff, including a bounded unresolved result. Not for implementing a known fix, new features, or explanation-only questions.

日本語の概要は準備中です。原文の説明を表示しています。

Build project context from an existing codebase through isolated scouts, resolve gaps, and preserve initialization gates.

日本語の概要は準備中です。原文の説明を表示しています。

Vet a new or changed third-party dependency for license, provenance, and supply-chain risk before any install runs.

日本語の概要は準備中です。原文の説明を表示しています。

Clean up an already-merged local branch after proving containment. Confirm each discard and preserve unique work.

日本語の概要は準備中です。原文の説明を表示しています。

Audit stale provenance-tracked docs on request. Report first; re-scout or re-baseline only for selected docs.

日本語の概要は準備中です。原文の説明を表示しています。

Review a diff with the reviewer fleet, funneled to one triaged verdict. Targets the current working diff, a path, or an inbound GitHub PR.

日本語の概要は準備中です。原文の説明を表示しています。

Prepare a declared release target, or preview it with --dry-run. Derive its version and require authorization before publication.

日本語の概要は準備中です。原文の説明を表示しています。

The checkpoint coordinator for /feature. Routed to by /feature once a writing-plans plan exists. Uses authored HTML checkpoints or bounded legacy batches, delegates each scope to subagent-driven-development (fresh author agent per task, full review chain, fresh verification), then stops for a human checkpoint before the next batch. The checkpointed counterpart to /sprint's autonomous run.

日本語の概要は準備中です。原文の説明を表示しています。

Stop everything and surface a rule conflict — persona vs. docs vs. code. Present both sides and the conflict-hierarchy level; the user resolves. No silent reconciliation.

日本語の概要は準備中です。原文の説明を表示しています。