The Codex sandbox environment is completely isolated from external networks by default, cannot access the internet, and can only use dependency packages declared in the user's repository that are pre-installed.