OpenShell
Run autonomous AI agents in safe, policy-controlled sandboxes
All Skills in This Repository (23)
Pure Emerald Level Indicatorscreate-spike
Convert vague problem descriptions into structured GitHub spike issues with technical context.
update-docs-from-commits
Scan recent commits to draft or update documentation pages under docs/.
debug-openshell-cluster
Diagnose OpenShell cluster startup failures and unhealthy states.
triage-issue
Automate assessment, classification, and routing of GitHub issues.
debug-inference
Diagnose OpenShell inference failures and produce corrected gateway, provider, and network configurations.
sbom
Generate CycloneDX SBOMs with Syft, resolve licenses, and export CSV reports.
review-security-issue
Analyze GitHub issues for security implications and classify remediation actions.
openshell-cli
Guide OpenShell CLI usage for sandbox, provider, policy, and gateway management.
watch-github-actions
Monitor GitHub Actions workflow runs and job progress via the gh CLI.
review-github-pr
Summarize GitHub pull request diffs and identify key design decisions.
create-github-issue
Create GitHub issues from natural language prompts using the gh CLI.
sync-agent-infra
Detect and fix drift across agent-first infrastructure files.
Frequently Asked Questions
FAQPage SchemaHow to install OpenShell?โผ
Run `npx skills add NVIDIA/OpenShell --all -g -y` in your terminal to install all skills in this suite globally.
What does OpenShell do for AI agents?โผ
OpenShell runs agents like Claude Code, Codex, and Copilot inside isolated sandboxes where YAML policies control exactly which files, networks, and APIs the agent can touch.
How do I control what an agent can access?โผ
You write a short YAML policy defining allowed hosts, HTTP methods, and paths, then apply it with `openshell policy set` without restarting the sandbox.
Can OpenShell manage agent API keys safely?โผ
Yes. Providers inject credentials as environment variables at runtime, so keys never touch the sandbox filesystem or leak into agent code.
Does OpenShell work with Kubernetes and Docker?โผ
Yes. The gateway supports Docker, Podman, Kubernetes, and MicroVM compute drivers, with a Helm chart available for cluster deployments.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core