sandbox

The system is designed as an agent sandbox to execute arbitrary code (shell, Python, Node.js, browser automation) within a Docker container. The provided `docker run` command explicitly uses `--security-opt seccomp=unconfined`, which disables seccomp filtering, allowing the container broader syscall access. This is an intentional design choice for a flexible sandbox but means the Docker container itself is the primary security boundary. Users must ensure robust container isolation and carefully manage agent permissions to prevent unintended execution or privilege escalation outside the sandbox. Environment variables are utilized for credentials in SDK integrations (e.g., Volcengine, OpenAI), mitigating hardcoded secret risks within the core server.