by trailofbits
Isolated VM environment for running Claude Code and Codex
# Add to your Claude Code skills
git clone https://github.com/trailofbits/coopGuides for using cli tools skills like coop.
Last scanned: 9/25/2026
{
"issues": [
{
"file": "README.md",
"line": 14,
"type": "remote-install",
"message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://raw.githubusercontent.com/trailofbits/coop/main/install.sh | \"",
"severity": "low"
}
],
"status": "PASSED",
"scannedAt": "2026-09-25T09:25:13.572Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how coop compares with popular alternatives.
coop is an open-source cli tools skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by trailofbits. Isolated VM environment for running Claude Code and Codex. It has 488 GitHub stars.
Yes. coop passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/trailofbits/coop" and add it to your Claude Code skills directory (see the Installation section above).
coop is primarily written in Rust. It is open-source under trailofbits on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other CLI Tools skills you can browse and compare side by side. Open the CLI Tools category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh coop against similar tools.
No comments yet. Be the first to share your thoughts!
Top skills in this category by stars
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Isolated VM environments for running Claude Code and Codex.
Pronunciation: "coop" (/kuːp/) — one syllable, rhymes with "loop", like the thing you keep chickens in. Not "co-op".
coop is a Rust CLI that manages disposable virtual machines where Claude Code and Codex have full tool access: Docker, git, compilers, package managers, all without risk to your host machine. Each VM is isolated, reproducible, and cheap to create and destroy.
Install the latest release:
curl -fsSL https://raw.githubusercontent.com/trailofbits/coop/main/install.sh | bash
Or build from source (requires Rust and CMake):
cargo build --workspace --release
cp target/release/coop target/release/coop-proxy /usr/local/bin/
Then build the VM template image:
coop setup
On Linux, coop setup also installs Firecracker and fetches a guest kernel. On macOS, install Lima first (brew install lima) — setup fails without it. coop is tested on macOS arm64 (Apple Silicon) and Linux x86_64; Linux arm64 builds are available but untested. Each backend has its own host requirements — see Prerequisites.
Keep coop updated:
coop update
See coop update and the updates config section.
Start an instance for the current project and launch an agent CLI:
cd ~/code/my-project
coop up
coop claude
# or
coop codex