Sobi MCP Skill Generator & Sandbox Onboarding

92 / 100 · Low risk

Fine to try.

By VeerMuchandi/rad-skills (GitHub) · other · 18 stars · scanned at commit 13d739a

Generates a Sobi sandbox companion skill (SKILL.md & .zip) with exact remote_cli mcp tool schemas, configures Sobi Agent Workload Identity IAM roles for outbound OAuth token injection, and mounts the skill and MCP server onto Sobi agents in Gemini Enterprise.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README.

Found in 3 places.

sobi_mcp_skill_generator/SKILL.md, line 36for PRINCIPAL in \
sobi_mcp_skill_generator/SKILL.md, line 54remote_cli mcp \
sobi_mcp_skill_generator/SKILL.md, line 111bash .agents/skills/sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh \

Sends data to these websites: vertexaisearch.cloud.google.com, discoveryengine.googleapis.com, agentidentity.googleapis.com, agentregistry.googleapis.com

The author does not mention this.

Found in 20 places.

sobi_mcp_skill_generator/SKILL.md, line 894. **Sandboxed `srcdoc` Iframe Prohibition Against `"Loading..."` / `fetch()` Stubs:** The Live Code Preview panel renders HTML inside a **sandboxed `srcdoc` if
sobi_mcp_skill_generator/SKILL.md, line 134| **Interactive `ui://` MCP App or `index.html` does not open automatically on Turn 1 (until user clicks `index.html`), OR gets stuck on `"Loading interactive..
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 106REDIRECT_LOC=$(curl -s -I "${BASE_URL}/authorize?client_id=${CLIENT_ID}&redirect_uri=https://vertexaisearch.cloud.google.com/oauth-redirect&response_type=code&s

Show 17 more

sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 108TOKEN_JSON=$(curl -s -X POST "${BASE_URL}/token" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 114TOOLS_SSE=$(curl -s -X POST "$MCP_URL" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 205EXISTING_AGENTS_JSON=$(curl -s -H "Authorization: Bearer $ADC_TOKEN" -H "X-Goog-User-Project: ${GE_PROJECT_NUM}" "${AGENTS_BASE}?pageSize=100")
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 218SKILL_RESP=$(curl -s -X POST "$AGENTS_BASE" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 236MCP_SERVERS_JSON=$(curl -s -H "Authorization: Bearer $ADC_TOKEN" -H "X-Goog-User-Project: ${GE_PROJECT_NUM}" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 250curl -s -H "Authorization: Bearer $ADC_TOKEN" -H "X-Goog-User-Project: ${GE_PROJECT_NUM}" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 254import sys, json, urllib.request
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 262req = urllib.request.Request(url, headers={"Authorization": f"Bearer {token}", "X-Goog-User-Project": proj})
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 263data = json.loads(urllib.request.urlopen(req).read().decode())
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 292curl -s -H "Authorization: Bearer $ADC_TOKEN" -H "X-Goog-User-Project: ${GE_PROJECT_NUM}" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 326curl -s -X PATCH "https://discoveryengine.googleapis.com/v1alpha/${SOBI_NAME}?updateMask=longRunningAgentDefinition.skill_agents,longRunningAgentDefinition.mcp_
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 335curl -s -H "Authorization: Bearer $ADC_TOKEN" -H "X-Goog-User-Project: ${GE_PROJECT_NUM}" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 340AUTH_PROVIDER_RES=$(curl -s -H "Authorization: Bearer $ADC_TOKEN" -H "X-Goog-User-Project: ${GE_PROJECT_NUM}" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 368curl -s -X POST "https://agentidentity.googleapis.com/v1alpha/${AUTH_PROVIDER_RES}:setIamPolicy" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 374AUTHZ_LIST=$(curl -s -H "Authorization: Bearer $ADC_TOKEN" -H "X-Goog-User-Project: ${GE_PROJECT_NUM}" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 381curl -s -X POST "https://agentidentity.googleapis.com/v1alpha/${AUTHZ_NAME}:setIamPolicy" \
sobi_mcp_skill_generator/scripts/setup_sobi_mcp_skill.sh, line 399curl -s -X DELETE "https://agentregistry.googleapis.com/v1alpha/${OLD_SKILL}?force=true" \

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'sobi-mcp-skill-generator-sandbox-onboarding' ] || [ -L ~/.agents/skills/'sobi-mcp-skill-generator-sandbox-onboarding' ]; then echo 'A skill folder named sobi-mcp-skill-generator-sandbox-onboarding already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/VeerMuchandi/rad-skills' "$d" && git -C "$d" checkout --quiet '13d739a39f73b3d2c355b495b95df2b7f19a37c5' -- 'sobi_mcp_skill_generator' && mkdir -p ~/.agents/skills && cp -R "$d"/'sobi_mcp_skill_generator' ~/.agents/skills/'sobi-mcp-skill-generator-sandbox-onboarding' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'sobi-mcp-skill-generator-sandbox-onboarding' ~/.claude/skills/'sobi-mcp-skill-generator-sandbox-onboarding' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for VeerMuchandi/rad-skills shows the score of its lowest-scoring skill.

SkillTrust badge for VeerMuchandi/rad-skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/VeerMuchandi/rad-skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/VeerMuchandi/rad-skills/)

Score history

Date	Version	Score
2026-11-10	`13d739a`	92