skills.rest
githubnextgithubnextOfficial·1 Agent Skills Included

gh-aw-firewall

Sandboxed network firewall with domain allowlisting for commands

Runs any command inside a sandboxed Docker network that restricts outbound HTTP/HTTPS traffic to an approved domain allowlist. Keeps sensitive API keys out of the agent environment by injecting credentials through an isolated proxy sidecar. Includes debugging skills that parse firewall logs, diagnose container health, and pinpoint blocked domains without manual log digging.
123|45
↗
npx skills add githubnext/gh-aw-firewall --all -g -y
Available:

Explains the firewall's container architecture, debugging workflow, and image strategy so the agent can operate, test, and troubleshoot the sandboxed network environment correctly.

All Skills in This Repository (1)

Pure Emerald Level Indicators
📦 In Repo
githubnextgithubnext

debug-firewall

Debug AWF firewall by inspecting Docker containers and analyzing Squid logs.

Official
Advanced

Frequently Asked Questions

FAQPage Schema
How to install gh-aw-firewall?▼

Run `npx skills add githubnext/gh-aw-firewall --all -g -y` in your terminal to install all skills in this suite globally.

How to restrict network access for a running command?▼

Wrap the command with the awf CLI and pass an allowlist, for example `sudo awf --allow-domains github.com -- curl https://api.github.com`. All other outbound HTTP/HTTPS traffic is blocked by the Squid proxy.

How to find which domains were blocked?▼

Use the included debug skills to parse Squid access logs and list blocked domains with counts, or run `awf logs --format json` and filter for denied requests.

Does it keep API keys away from the agent?▼

Yes. An optional API proxy sidecar holds the real OpenAI, Anthropic, Copilot, or Gemini credentials and injects them at the proxy layer, so keys never appear in the agent's environment.

Can it run in GitHub Actions CI pipelines?▼

Yes. It provides a GitHub Action setup step, and the skills cover compiling workflows, downloading CI logs, and debugging workflow failures directly from the agent.

Related Repositories in Software Engineering

View All in Software Engineering→
openclawopenclaw
388.4k

openclaw

Run a personal AI assistant across your devices and chat apps

Official📦 120 Skills
obraobra
280.0k

superpowers

Gives coding agents a disciplined workflow from idea to merged code

Community📦 15 Skills
facebookfacebook
248.4k

react

AI agent skills for building, testing, and porting React core

Official📦 14 Skills