How to create a WordPress sandbox on a live server for website development?

I have the wp-admin access but I don’t have cpanel access. The server
is through shared hosting.

You can’t in any meaningful way put up a “sandbox” given those conditions. You have no way to isolate the code, and you need to isolate the code somehow. As I wrote in a comment, you are putting probably buggy, probably unstable, and potentially insecure code on a production server. You need to isolate– “sandbox”– the code where it can’t effect anything outside of itself and that means a subdomain, a seperated domain, an independent database, and probably other precautions as well. If you are asking “how” you don’t have the knowledge to do this safely.

Pay for another hosting package or develop locally.