Agent Skills: pi-sandbox

Run Pi in a least-privilege Docker sandbox on this machine — read-only filesystem, no network by default, deny-by-default bash gate, hostname-scoped egress proxy. Use when running untrusted code or prompts, isolating a Pi run from host credentials/state, or when asked for sandboxed/contained agent execution.