Docker Sandboxes: Network Policy & Credentials Overview This skill owns (network egress) and (service secrets and registry credentials). The proxy enforces egress policy and injects stored credentials on matching domains. Proxy-managed sentinels are not usable upstream credentials, but OAuth passthrough can expose real tokens to the sandbox. Egress policy does not protect a real credential once leaked outside the sandbox; revoke or rotate a leaked credential. When to use this skill Activate this skill when: - The user wants to allow, deny, or inspect which hosts a sandbox (or all sandboxes) c…