Skip to main content
affpapa.org
RU EN
skill Claude Code CX Codex Cursor GitHub Copilot

devcontainer-setup — Claude Code skill: what it does, how to install

Creates a sandboxed devcontainer with Claude Code, persistent volumes, and tooling for Python, Node, Rust, or Go. Helpful when setting up isolated development workspaces.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add trailofbits/skills --skill devcontainer-setup -a claude-code
Open on GitHub

What devcontainer-setup does

The skill inspects project manifests such as pyproject.toml, package.json, Cargo.toml, or go.mod to infer the project name and detect runtime stacks. For polyglot repositories, it configures each language by priority: Python runs from the base Dockerfile via uv, while Node, Rust, and Go get attached through standard devcontainer features.

Security controls form the core of the generated setup. The container applies network isolation using iptables and ipset, sandboxes execution with bubblewrap, and mounts the .devcontainer folder as read-only. It also forwards Anthropic API tokens into the container and installs CLI utilities like ripgrep, fzf, tmux, and ast-grep.

This setup belongs strictly in local development, not production builds. If your repository already has a functioning devcontainer configuration, running this generator will introduce unwanted overwrites rather than incremental edits.

What it helps with

  • build an isolated sandbox for Claude Code workflows
  • generate .devcontainer configurations for Python, Node, Go, or Rust
  • configure persistent volumes for package manager caches
  • apply network restrictions and sandboxing via bubblewrap

Example prompts for the agent

  • Set up a devcontainer for this Python project
  • Create a sandboxed Claude Code environment with Rust tooling
  • Add devcontainer support with persistent volumes to this repo

How to install devcontainer-setup

1Skills CLI (Vercel)

npx skills add trailofbits/skills --skill devcontainer-setup -a claude-code

2Manually: put the files in place

~/.claude/skills/devcontainer-setup/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/devcontainer-setup/

From the same set35

The whole set →
semgrep trailofbits Runs a Semgrep static security audit on your codebase. It presents a plan for user confirmation and merges all findings into SARIF. Claude Code CX Codex Cursor +1 9,500installs differential-review trailofbits Reviews code changes for security issues using Git history and test coverage. Use it for commits, diffs, and pull requests that need a written review report. Claude Code CX Codex Cursor +1 8,800installs modern-python trailofbits Configures Python projects with a modern tooling stack: uv for dependency management, ruff for linting and formatting, ty for type checking. Use when starting new projects, writing scripts, or migrating from legacy tools. Claude Code CX Codex Cursor +1 8,700installs secure-workflow-guide trailofbits Guides smart contracts through Trail of Bits' 5-step security audit on check-in or before deployment. It runs static analysis, generates visual charts, and prepares fuzzing tests. Claude Code CX Codex Cursor +1 7,400installs sharp-edges trailofbits Audits API designs and configuration schemas for developer footguns. Flags dangerous defaults and fragile interfaces where the easiest path causes security vulnerabilities. Claude Code CX Codex Cursor +1 6,900installs agentic-actions-auditor trailofbits Inspects GitHub Actions workflows for prompt injection risks and insecure AI agent setups. Catches attacker inputs leaking into prompts via event contexts or environment variables. Claude Code CX Codex Cursor +1 6,700installs gh-cli trailofbits A skill that redirects GitHub requests from curl and fetch to authenticated gh CLI for repositories, pull requests, and issues. Use it for private repos and higher API limits. Claude Code CX Codex Cursor +1 6,600installs variant-analysis trailofbits Finds related occurrences of an already identified defect across a repository. Use it after a vulnerability or logic issue turns up and similar code needs checking. Claude Code CX Codex Cursor +1 6,400installs

Similar

arize-instrumentation official arize This skill helps add Arize AX tracing to an LLM application. The agent inspects the project first, then proposes instrumentation for approval. GitHub Copilot 1,100installs nextflow K-Dense-AI Guides your AI agent in writing, running, and debugging Nextflow DSL2 pipelines and nf-core workflows on HPC or cloud runners. Claude Code CX Codex Cursor +1 1,400installs architect-review sickn33 Turns the agent into an architecture reviewer: it weighs design decisions, names the risks and tradeoffs, and asks for a validation plan. Claude Code CX Codex Cursor +1 1,300installs omc-doctor Yeachan-Heo A skill that audits an oh-my-claudecode install: compares the plugin version against npm and hunts stale hooks in your settings files. Useful when the plugin looks installed but nothing changes. Claude Code CX Codex Cursor +1 832installs release Yeachan-Heo A repo-aware skill that discovers release rules from CI files, caches them in .omc/RELEASE_RULE.md, and guides releases. Helpful when preparing tags and version bumps. Claude Code CX Codex Cursor +1 827installs dart-resolve-package-conflicts dart-lang Skill for resolving Dart package version conflicts when pub get fails. Teaches how to audit dependencies, update packages within constraints, and surgically remove entries from the lockfile. Claude Code CX Codex Cursor +1 18,600installs wizard Matt Pocock This skill creates an interactive bash wizard for manual setup steps, CI secrets, third-party dashboards, and one-off migrations. Claude Code 553,369installs hyperframes-cli heygen-com Controls HyperFrames video workflows from the CLI: audits layouts and contrast, edits timeline clips, captures snapshots, and renders locally or in cloud runtimes. Claude Code CX Codex Cursor +1 1,200,000installs

Questions about devcontainer-setup

How to install devcontainer-setup in Claude Code?

Run npx skills add trailofbits/skills --skill devcontainer-setup -a claude-code. This downloads the skill files directly into your Claude Code skills directory.

What does devcontainer-setup do?

It detects repository languages from lockfiles and generates .devcontainer assets. The container bundles Claude Code, persistent volume mounts, editor extensions, and security tools like bubblewrap.

Can devcontainer-setup modify an existing container configuration?

No, it is built to scaffold fresh development containers from scratch. Modifying existing setups requires manual editing.

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor