The code-execution sandbox is not configured with environment variables. Its
mode, network policy, workspace access, resources, and runtime preference are set
through the Sandbox settings page (or PUT /api/sandbox/config) and persisted
to ~/.snippbot/sandbox_config.json. See Run Code in Sandbox.
The only sandbox-related environment variables the code reads are consumed by the
claude-native tool bridge (a separate out-of-process helper), not the main
daemon sandbox:
Variable
Default
Description
SNIPPBOT_SANDBOX_MODE
all
Sandbox mode used by the claude-native Bash bridge (off, selective, all)
SNIPPBOT_SANDBOX_RISK_THRESHOLD
0.5
Risk threshold used by the claude-native Bash bridge
SNIPPBOT_CONTAIN_CUSTOM_PYTHON
(unset)
Overrides + locks the contain_custom_python sandbox setting when set (1/0); when unset, the UI toggle applies. On ⇒ installed custom_python tools run contained under Safe/Strict; off ⇒ blocked
SNIPPBOT_STRICT_DAEMON_LOOPBACK
(unset)
Overrides + locks the strict_daemon_loopback sandbox setting when set. On ⇒ a Strict-contained tool may reach the local daemon over an egress-blocked network (Linux; full isolation on Docker Desktop)