# Jetbrains Sandbox

Install and operate IntelliJ in a Linux cloud sandbox.

- Repository: https://github.com/Kilo-Org/kilocode (27829 stars)
- Category: Testing
- License: MIT
- Last updated: 2026-10-31
- Runs scripts: yes, review before use

## Install

Claude Code: `npx skills add Kilo-Org/kilocode --skill jetbrains-sandbox -g -a claude-code -y`
Codex: `npx skills add Kilo-Org/kilocode --skill jetbrains-sandbox -g -a codex -y`
Cursor: `npx skills add Kilo-Org/kilocode --skill jetbrains-sandbox -g -a cursor -y`
Gemini CLI: `npx skills add Kilo-Org/kilocode --skill jetbrains-sandbox -g -a gemini-cli -y`

## Description

Install and operate IntelliJ in a Linux cloud sandbox. Provide a browser desktop and MCP Steroid so an agent can inspect, edit, debug, configure, or automate the IDE using whichever interface suits the task. Kilo installation and screenshot helpers are optional conveniences.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# JetBrains Sandbox

Use this skill to give an agent a running IntelliJ instance and the means to control it.
The setup provides IntelliJ IDEA, MCP Steroid, and a minimal browser desktop using
TigerVNC, Openbox, and noVNC. It is not tied to testing a particular plugin or following
a prescribed IDE workflow. The HTTP transport works through sandbox HTTPS proxies that
break WebSocket upgrades.

## Boundaries

- Tested on Debian 13, Linux x86-64, with Bun available. Allow roughly 8 GB RAM and
  10 GB free disk for the IDE, archives, plugins, and caches.
- Installation needs root for apt and creating the IDE account. With dependencies
  preinstalled, a non-root account can use `--skip-deps` and run as itself.
- **No public tunnel or viewer password is created.** The default bind is loopback.
  Use `--host 0.0.0.0` only behind the user's authenticated sandbox port forwarding.
  Binding only to `127.0.0.1` may make the platform report that nothing is listening.
- Raw VNC and MCP remain bound to loopback even when the viewer is externally reachable.
- If a secure preview proxy rewrites `Host`, pass its exact browser-facing origin with
  `--origin https://your-preview-host`. Arbitrary forwarded headers are not trusted.
- Do not accept JetBrains agreements, start a trial, sign into services, copy the agent's
  credentials into the IDE, or dismiss unrelated dialogs automatically.
- All runtime state defaults to the current worktree's ignored
  `.kilo-dev/jetbrains-sandbox/`. Never point `--dir` at the workspace itself.
- Never overwrite plugin jars while that state directory's IDE is running. Stop first.
- Do not stop another session's IDE or alter the user's workspace ownership. A supplied
  `--project` must already be accessible to the selected non-root `--user`.

## Pinned Setup

The rest: https://github.com/Kilo-Org/kilocode/blob/HEAD/.kilo/skills/jetbrains-sandbox/SKILL.md