Token导航 LogoToken导航TokenDH.com
开发敏感数据github未标认证来源可访问许可证需确认审计异常

developer-sandbox开发者沙箱

Agent Skill

developer-sandbox 用于处理 GitHub 仓库、Issue、Pull Request 和代码协作信息,适合在 Codex、Claude、Cursor、Gemini CLI 中需要围绕仓库状态、代码变更或协作事项进行整理时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态,以及是否会触发联网、命令执行或文件读写。

总安装

924

周安装

37

GitHub Stars

69

下载量

299
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:developer-sandbox(开发者沙箱)
来源仓库:https://github.com/jonathimer/devmarketing-skills
仓库路径:skills/developer-sandbox
安装命令:
npx skills add https://github.com/jonathimer/devmarketing-skills --skill developer-sandbox
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/jonathimer/devmarketing-skills --skill developer-sandbox

简介

developer-sandbox 专注于设计交互式 playgrounds 和 demo 环境,降低开发者试用门槛。

  • 适用于产品评估、概念学习和营销演示等场景,提升用户从好奇到行动转化率。
  • 强调在不确定性问题解决前移除配置障碍,提供开箱即用的体验路径。
  • 安装后应验证 Docker 环境可用性,因本地开发依赖容器化沙箱运行时。
  • 输出内容为设计建议和最佳实践,不包含自动部署逻辑,需配合 CI/CD 流程落地实施。

SKILL.md

Interactive Playgrounds and Demo Environments

Let developers experience your product before they commit. A great playground removes the biggest barrier to adoption: uncertainty about whether your product solves their problem.

Overview

Developer playgrounds serve multiple purposes:

  • Evaluation: Let developers test before investing setup time
  • Learning: Interactive environment for understanding concepts
  • Marketing: Demonstrate capabilities without sales calls
  • Support: Reproducible environment for debugging issues

This skill covers designing playgrounds that convert curious visitors into active users.

Before You Start

Review the developer-audience-context skill to understand:

  • What do developers want to validate before signing up?
  • What's the typical evaluation workflow in your space?
  • What competing products offer playgrounds?
  • What's the minimum viable experience that demonstrates value?

Your playground should answer the questions developers have when evaluating.

Playground Design Principles

Principle 1: Instant Gratification

Developers should see something meaningful within 10 seconds of landing.

Good: Page loads with a working example already running Bad: Empty editor with "Type your code here" placeholder

<!-- Good: Pre-loaded, running example -->
<div class="playground">
  <div class="editor">
    <pre><code>// Analyze sentiment of this text
const result = await api.analyze("I love this product!");
console.log(result.sentiment); // "positive"</code></pre>
  </div>
  <div class="output">
    <pre>{ "sentiment": "positive", "confidence": 0.94 }</pre>
  </div>
  <button class="run-btn">Run ▶️</button>
</div>

Principle 2: Progressive Complexity

Start simple, let developers go deeper as curiosity grows.

Level 1: One-Click Demo

[Analyze Text] → See result immediately

Level 2: Editable Input

[Edit the text] → [Run] → See result

Level 3: Full API Access

Edit code → Modify parameters → See raw request/response

Level 4: Full Playground

Multiple files → Import SDK → Build mini-app

Principle 3: Real API, Real Results

Never fake the results. Use your actual API with sandbox credentials.

Why real matters:

  • Builds trust (not a demo, but actual product)
  • Shows real performance characteristics
  • Demonstrates actual error handling
  • No surprises when they sign up

Principle 4: Zero Friction

No signup required for basic playground. No installation. No configuration.

❌ Bad: "Sign up to try the playground"
❌ Bad: "Install our CLI to continue"
❌ Bad: "Configure your environment..."

✅ Good: Works immediately in browser

Pre-Populated Examples

Example Selection Strategy

Choose examples that:

  1. Show core value in 30 seconds
  2. Solve real problems developers have
  3. Demonstrate differentiation from competitors
  4. Scale in complexity from simple to advanced

Example Categories

"Hello World" Example

  • Simplest possible use of your API
  • Should work with zero modification
  • Proves the system is working
// Example: Text Analysis API
const result = await api.analyze("Hello, world!");
// Output: { words: 2, characters: 13 }

"Aha Moment" Example

  • Shows unique capability of your product
  • Creates the "wow, that was easy" reaction
  • This is your most important example
// Example: Shows AI doing something impressive
const result = await api.summarize(longArticle);
// Output: A perfect 3-sentence summary

"Real Use Case" Examples

  • Actual scenarios developers encounter
  • Shows how to solve specific problems
  • Multiple examples for different use cases
// Example 1: E-commerce - Analyze product reviews
// Example 2: Support - Classify incoming tickets
// Example 3: Social - Detect spam comments

"Integration" Examples

  • Shows product working with popular tools
  • Addresses "will this work with my stack?" concern
// Example: Integration with Express.js
app.post('/analyze', async (req, res) => {
  const result = await api.analyze(req.body.text);
  res.json(result);
});

Example Quality Checklist

  • Example runs without modification
  • Output is interesting/impressive
  • Code follows language best practices
  • Comments explain what's happening
  • Real-world use case is obvious
  • Leads to natural "what else can it do?" curiosity

Sharing and Embedding

Shareable Playground URLs

Enable developers to share their playground state:

https://playground.example.com/?code=BASE64_ENCODED_CODE
https://playground.example.com/share/abc123 (stored state)

Use Cases:

  • Sharing code with teammates
  • Linking from Stack Overflow answers
  • Bug reports with reproduction
  • Code snippets in blog posts

Embeddable Playgrounds

Let developers embed playgrounds in their own content:

<!-- Embed in documentation -->
<iframe
  src="https://playground.example.com/embed/quickstart"
  width="100%"
  height="400px"
></iframe>

<!-- Or via script tag -->
<div class="example-playground" data-example="quickstart"></div>
<script src="https://playground.example.com/embed.js"></script>

Embedding Considerations

Size and Performance:

  • Lightweight embed script (< 50KB)
  • Lazy-load playground until visible
  • Responsive width, configurable height

Customization:

  • Theme options (light/dark, match host site)
  • Show/hide specific UI elements
  • Read-only vs. editable modes

Attribution:

  • Subtle branding that links back
  • "Powered by [Product]" footer
  • "Edit in full playground" link

Gating vs. Ungating

When to Keep Ungated

Ungated (no signup required) when:

  • Developers are evaluating whether to adopt
  • Example demonstrates core product value
  • Rate limits can prevent abuse
  • Goal is top-of-funnel awareness

When to Gate

Gated (require signup) when:

  • Using production API resources
  • Accessing personal/saved playgrounds
  • Advanced features that require account
  • Generating API keys for external use

Progressive Gating Strategy

┌─────────────────────────────────────────────────────────┐
│ UNGATED                                                  │
│ • Run pre-built examples                                │
│ • Edit and re-run examples                              │
│ • Share playground URLs                                 │
├─────────────────────────────────────────────────────────┤
│ FREE SIGNUP                                             │
│ • Save playgrounds                                      │
│ • Get API key for external use                         │
│ • Access more examples                                  │
│ • Higher rate limits                                    │
├─────────────────────────────────────────────────────────┤
│ PAID                                                    │
│ • Production API access                                 │
│ • Team features                                         │
│ • Premium models/features                               │
└─────────────────────────────────────────────────────────┘

Gating UX

When you do gate, minimize friction:

<!-- Good: Non-blocking gate -->
<div class="save-prompt">
  <p>Want to save this playground?</p>
  <button onclick="signup()">Create free account</button>
  <button onclick="dismiss()">Continue without saving</button>
</div>

<!-- Bad: Blocking gate -->
<div class="modal">
  <p>Sign up to continue using the playground</p>
  <form><!-- required fields --></form>
</div>

Playground to Signup Conversion

The Conversion Funnel

Playground Visit
      ↓
Runs First Example (Time to first interaction)
      ↓
Modifies Example (Engagement)
      ↓
Explores More Examples (Interest)
      ↓
Hits Limitation (Trigger)
      ↓
Signs Up (Conversion)

Designing Conversion Triggers

Natural limitations that encourage signup:

// Rate limit message
"You've used 10/10 free playground requests today.
 Sign up for 1,000 free requests/month."

// Feature tease
"This example uses our Pro model.
 Sign up to try it free."

// Save prompt
"Your playground session will expire in 30 minutes.
 Create an account to save your work."

Avoid artificial friction:

// Bad: Arbitrary block
"Sign up to run more than 3 examples"

// Bad: Feature that should be free
"Sign up to see request/response details"

Conversion Best Practices

Clear value proposition:

┌─────────────────────────────────────────┐
│ Create a free account                   │
│                                         │
│ ✓ Get your own API key                 │
│ ✓ Save and share playgrounds           │
│ ✓ 1,000 free API calls/month           │
│                                         │
│ [Sign up with GitHub]                   │
│ [Sign up with Google]                   │
│ [Sign up with email]                    │
└─────────────────────────────────────────┘

Preserve context:

  • After signup, return to the same playground state
  • Pre-populate API key in their code
  • Show "Next steps" relevant to what they were doing

Measure the funnel:

analytics.track('playground_visit');
analytics.track('playground_first_run');
analytics.track('playground_code_edit');
analytics.track('playground_signup_prompt_shown');
analytics.track('playground_signup_started');
analytics.track('playground_signup_completed');

Playground Architecture

Client-Side Playgrounds

Best for:

  • JavaScript/TypeScript SDKs
  • Browser-based APIs
  • When latency matters

Architecture:

┌──────────────────────────────────────────┐
│ Browser                                  │
│  ┌─────────────┐    ┌────────────────┐ │
│  │ Monaco      │    │ Preview/Output │ │
│  │ Editor      │ →  │ Iframe        │ │
│  └─────────────┘    └────────────────┘ │
│         ↓                    ↓          │
│  Bundler (esbuild-wasm) → Execute       │
│                              ↓          │
│                        Your API         │
└──────────────────────────────────────────┘

Server-Side Playgrounds

Best for:

  • Python, Go, Ruby, etc.
  • When isolation is critical
  • Complex dependencies

Architecture:

┌────────────────────────────────────────────────┐
│ Browser                                        │
│  ┌─────────────┐    ┌────────────────────┐   │
│  │ Editor      │    │ Output             │   │
│  └─────────────┘    └────────────────────┘   │
│         ↓                    ↑                │
└─────────│────────────────────│────────────────┘
          │                    │
          ↓                    │
   ┌──────────────────────────────────────┐
   │ Backend                              │
   │  ┌────────────┐    ┌─────────────┐ │
   │  │ Code       │ →  │ Sandbox     │ │
   │  │ Receiver   │    │ Container   │ │
   │  └────────────┘    └─────────────┘ │
   └──────────────────────────────────────┘

Security Considerations

Sandbox isolation:

  • Execute user code in containers
  • Limit CPU, memory, network
  • No filesystem access to host
  • Kill runaway processes

API protection:

  • Rate limiting per IP/session
  • Sandbox-only API credentials
  • Monitor for abuse patterns

Content safety:

  • Scan generated content
  • Block malicious outputs
  • Log for audit

Playground UX Components

Essential UI Elements

┌─────────────────────────────────────────────────────────────┐
│ [Examples ▼] [Docs] [Share] [Sign Up]                       │
├───────────────────────────────┬─────────────────────────────┤
│                               │                             │
│  // Your code here            │  Output                     │
│  const result = await         │  {                         │
│    api.analyze("Hello");      │    "sentiment": "neutral"  │
│                               │  }                         │
│                               │                             │
│                               │                             │
├───────────────────────────────┴─────────────────────────────┤
│ [▶ Run]  [Reset]  [Copy Code]  [Copy as cURL]              │
└─────────────────────────────────────────────────────────────┘

Editor Features

  • Syntax highlighting
  • Autocomplete for SDK methods
  • Error highlighting
  • Line numbers
  • Multiple file support (advanced)

Output Features

  • Formatted JSON
  • Collapsible nested objects
  • Copy output button
  • Request/response toggle
  • Timing information

Tools

Code Editors

  • Monaco Editor: VS Code's editor (feature-rich)
  • CodeMirror: Lightweight, extensible
  • Ace Editor: Long-standing, battle-tested

Sandboxing

  • Firecracker: Lightweight VMs
  • gVisor: Container sandboxing
  • WebContainers: Browser-based Node.js

Playground Platforms

  • CodeSandbox: Full development environments
  • StackBlitz: WebContainer-based
  • Replit: Multi-language support
  • Custom: Build your own for control

Embedding

  • iframes: Simple but limited
  • Web Components: Better isolation
  • Script embeds: Most flexible

Related Skills

  • api-onboarding: Playground as onboarding tool
  • docs-as-marketing: Interactive examples in documentation
  • sdk-dx: SDK design that works in playground context
  • developer-metrics: Measuring playground effectiveness
  • developer-audience-context: Understanding what to demo

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

33.24%
按下载量换算99

Claude

31.75%
按下载量换算95

Cursor

21.28%
按下载量换算64

Gemini CLI

10.72%
按下载量换算32

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

未通过

权限和风险

敏感数据

该 Skill 可能接触密钥、Token、环境变量或敏感配置,应进入高风险复核队列,默认不自动发布。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills