[External Plugin]: SandBase Harness

[denial123789]

Plugin name

sandbase-harness

Short description

Connects compatible coding agents to a running SandBase Harness runtime for isolated execution, session management, and observability through its MCP server.

GitHub repository

sandbaseai/sandbase-harness

Plugin path inside the repository

agent-plugin

Ref to review

No response

Commit SHA to review

841ac14e1b5a37b52a97d89eebe19c030ee4f1c6

Version

0.1.0

License identifier

Apache-2.0

Author name

SandBase AI

Author URL

https://github.com/sandbaseai

Homepage URL

https://github.com/sandbaseai/sandbase-harness

Keywords

agent-harness
mcp
sandbox
observability

Additional notes for reviewers

This portable Agent Plugins 1.0 package connects an agent to an existing SandBase Harness deployment through the published ghcr.io/sandbaseai/sandbase-harness-mcp:0.3.4 MCP image. It does not contain credentials: MANAGED_AGENTS_URL and the optional MANAGED_AGENTS_API_KEY are forwarded from the user's environment at runtime.

The plugin and MCP manifests validate against the official Agent Plugins 1.0 JSON Schemas. The repository test suite verifies the pinned image, required environment forwarding, and secret posture. At the submitted commit, the complete CI suite passed (Quality, Test, and Build).

Disclosure: I am affiliated with SandBase AI. AI assistance was used to package, test, and document the plugin; the submitted commit was reviewed through repository tests, schema validation, and CI.

Submission checklist

• The plugin lives in a public GitHub repository.
• The ref and/or sha I provided is immutable (release tag and/or full 40-character commit SHA), not a branch.
• This submission follows this repository's contribution, security, and responsible AI policies.
• This plugin is not already listed in the Awesome Copilot marketplace.

[github-actions]

🟡 Contributor Reputation Check: MEDIUM risk

Check	Risk
Profile	MEDIUM
Credential audit	NONE

Maintainers: please review this contributor before merging.
See the workflow run for full details.
Automated check powered by AGT.

[github-actions]

✅ External plugin intake passed

This submission passed automated intake validation and quality checks and is ready for maintainer review.

• Plugin: sandbase-harness

• Repository: https://github.com/sandbaseai/sandbase-harness

• SHA: 841ac14e1b5a37b52a97d89eebe19c030ee4f1c6

Reviewer signals

These are non-blocking heuristics for maintainer review; they are not evidence of misconduct or low quality.

Signal	Result
Repository age	39 day(s)
Repository activity	no configured signal
Repository counts	624 stars · 20 watchers · 59 forks · 1 open issues/PRs
Homepage heuristics	⚠️ pricing

Quality gate summary

Legend: ✅ pass · ⚠️ warning · 🛑 fail

Gate	Status
spec compliance (non-blocking)	✅ pass
vally lint	✅ pass
install smoke test	✅ pass
version match	✅ pass
ref/sha consistency	⚪ not_run
canvas structure	⚪ not_run

• spec compliance: pass
• vally lint: pass
• install smoke test: pass
• version match: pass
• ref/sha consistency: not_run
• canvas structure: not_run
• overall: pass

spec compliance output (✅ pass)

Agent Plugins v1.0.0 manifest checks passed for plugin.json.

vally lint output (✅ pass)

0 skill(s) linted

install smoke test output (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-VAIwod/copilot-home/.copilot/installed-plugins/external-plugin-intake/sandbase-harness/plugin.json.

Version match output

- 841ac14e1b5a37b52a97d89eebe19c030ee4f1c6: matched version "0.1.0" at "agent-plugin/plugin.json".

Ref/SHA consistency output

Ref/SHA consistency gate skipped because one of source.ref or source.sha was not provided.

Canvas structure output

Canvas structure gate skipped because plugin is not tagged with "canvas".

Canonical external.json payload

{
  "name": "sandbase-harness",
  "description": "Connects compatible coding agents to a running SandBase Harness runtime for isolated execution, session management, and observability through its MCP server.",
  "version": "0.1.0",
  "author": {
    "name": "SandBase AI",
    "url": "https://github.com/sandbaseai"
  },
  "repository": "https://github.com/sandbaseai/sandbase-harness",
  "homepage": "https://github.com/sandbaseai/sandbase-harness",
  "license": "Apache-2.0",
  "keywords": [
    "agent-harness",
    "mcp",
    "sandbox",
    "observability"
  ],
  "source": {
    "source": "github",
    "repo": "sandbaseai/sandbase-harness",
    "path": "agent-plugin",
    "sha": "841ac14e1b5a37b52a97d89eebe19c030ee4f1c6"
  }
}

View workflow run

[denial123789]

Superseded by #2725, which now points to the current v0.3.7 clean-profile-tested snapshot. Closing this older duplicate to keep the maintainer review queue focused.