Run untrusted code (Box)

Use this right before executing code you generated or fetched when running it locally would be risky: shell scripts, scraped snippets, dependency installs, anything with side effects. Pattern: create → run → delete, so nothing touches the host.

Why Box

• Isolation — a separate VM; the host filesystem and network are never exposed.
• Disposable & cheap — box delete when done; per-second billing, a run costs cents.
• Real machine — generated code that needs pip install, subprocesses, or Docker actually works.

Prefer another tool for: thousands of tiny <500 ms runs (E2B/Modal microVMs).

Prereqs

curl -fsSL https://box.ascii.dev/install | sh, then box login "$BOX_API_KEY" --json.

Recipe