
Description
sandbox-npm-install is an agent skill from the github/awesome-copilot collection for installing npm packages inside a Docker sandbox. It applies when packages need to be installed for the first time in a new sandbox session, when package.json or package-lock.json has changed, when node_modules is missing or damaged, or when native binaries crash with errors such as SIGILL, SIGSEGV, mmap failures or an unaligned sysNoHugePageOS message. The skill explains the cause. Sandbox workspaces are usually mounted through virtiofs, a file-sync layer between the host and the Linux virtual machine, and native Go and Rust binaries such as esbuild, lightningcss and rollup crash with memory-alignment failures when run from that mount on aarch64 machines. The fix is to install the packages on the container's local ext4 filesystem and link them back into the workspace. Prerequisites are a sandbox with a virtiofs-mounted workspace, Node.js and npm in the container, and a package.json in the workspace. It is useful for developers who run builds inside Docker sandboxes on Apple silicon and similar hardware. The skill changes where dependencies are installed, so it should be used in the sandbox only, and the lockfile should be kept in sync with what is installed. The skill is installed with the skills CLI from the github/awesome-copilot repository. Its skills.sh page showed about 1.7K installs, with Gen Agent Trust Hub and Socket passing and Snyk showing a warning at the time of the scan.…
Highlights
- npm installs inside a Docker sandbox
- Fixes native binary crashes on virtiofs mounts
- Installs on the local ext4 filesystem and symlinks back
- Covers SIGILL, SIGSEGV and mmap errors
- Installs with the skills CLI
Ratings & Reviews
No ratings yet
Be the first to rate sandbox-npm-install.
People also visit
sandbox-npm-install FAQ
When is it needed?
For a first install in a new sandbox, after package changes, when node_modules is damaged, or when native binaries crash.
What causes the crashes?
Native binaries run from a virtiofs mount crash with memory alignment failures on aarch64 machines.
What is the fix?
Install on the container's local ext4 filesystem and symlink the result back into the workspace.
How do I install it?
Run npx skills add https://github.com/github/awesome-copilot --skill sandbox-npm-install.
What security audits does it have?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Warn. A Warn or Fail is worth reading before you install.
What are the best sandbox-npm-install alternatives?
Popular alternatives to sandbox-npm-install include deployment-patterns, docker-patterns and uncloud. See all sandbox-npm-install alternatives










