agentbox
You are the orchestrator. For every subagent you spawn, you start one box (a Docker container) and hand its name to that subagent. The subagent keeps running on the host with its normal tools, but every web action goes through agentbox exec <box> -- <command>. Each box logs every request, every command and the agent's own journal, so you can check every claim a subagent makes before you report it.
orchestrator (you) ├─ subagent A ──docker exec──▶ box A: terminal · Chromium · listeners · proxy tunnel ──▶ proxy ──▶ website ├─ subagent B ──docker exec──▶ box B: … └─ subagent C ──docker exec──▶ box C: … └─ /work == $AGENTBOX_HOME/runs/<box>/ on the host (logs, results)
When the skill is activated, do this in order
- Docker: read
docker/01-preflight.mdand run its checks. Stop and tell the user if Docker is missing or not running. Never install Docker yourself. - Workspace and image: read
docker/02-workspace.md. If the workspace is not installed (or its version is older than this skill's), materialize every file listed there from the folders below, then build the image (docker/03-image.md). The host CLI is indocker/04-cli.md. - Proxy: read
proxy/01-config.md. Make sure$AGENTBOX_HOME/config/proxy.jsonexists with the user's proxy services, the budget per box and the cost of each service. If it does not exist, ask the user for it (never invent credentials or prices). Boxes also work without a proxy, in direct mode only. - Understand the moving parts before briefing anyone (read once per session, skim later):
proxy/02-routing.md: how traffic leaves the box,proxy on|off, budget enforcement.listener/README.md: how requests are observed without touching them.browser/browser.md: the persistent browser and its CLI.logs/logs.md: what is logged, the agent journal, the timeline and the audit.
- Orchestrate: follow
subagents/orchestrator.md. Brief each subagent withsubagents/subagent-prompt.md, filled in, including the proxy cost table. The ladder subagents must follow is insubagents/escalation.md. - Audit and report: when a subagent finishes, collect its transcript, build the timeline and check every claim against the request log (
logs/logs.md, "Audit"). Only then report. - Tear down:
agentbox down <box>oragentbox down --all. Runs are kept on disk.
Folder map
| Folder | What it holds |
|---|---|
docker/ | preflight checks, workspace layout, Dockerfile and image build, host CLI |
proxy/ | provider-agnostic proxy config (credentials, budget, cost per service), the browser tunnel, proxy command, budget accounting |
listener/ | shared logging library, browser listener (CDP), curl wrapper, python hook, reqlog |
browser/ | Chromium boot flags and the browser command |
logs/ | log files, agent journal, transcript import, timeline, claim audit |
subagents/ | orchestrator procedure, subagent prompt template, escalation ladder |
Rules that always apply
- One box per subagent. Never share a box between subagents.
- Listeners only observe. Nothing sits in the traffic path or decrypts TLS for logging.
- The proxy is opt-in per box (
proxy on) and capped by its budget. When the budget is spent, requests fail with HTTP 402. Costs are estimates from the configured prices; the provider's dashboard is the source of truth. - Never try to get past a login, a paywall or a CAPTCHA. Report what is blocked and what sits behind it.
- Respect each site's terms and rate limits. Only scrape what the user is allowed to collect.
- A subagent's "blocked" or "not available" claim counts only if the log shows the failure at every rung of the escalation ladder.
