What problem does it solve? AI agents often need to read, write, and test files on a local machine, but granting unrestricted filesystem and shell access is risky. This Skill sets up local-mcp, a Rust-based MCP server that gives agents controlled file editing and sandboxed command execution with session-scoped permissions. ## Core Features & Use Cases - Sandboxed File Operations: Read, write, and list files within a session working directory, with unified diffs shown in the monitoring UI. - Isolated Command Execution: Run commands without network access using Landlock (Linux) or Seatbelt (macOS), with approval-gated unsandboxed execution for network tasks. - Background Job Management: Start long-running processes like dev servers, then poll or stop them via job IDs. - Use Case: An agent refactors multiple Rust source files, runs cargo test in the sandbox to verify changes, and only requests approval when deploying over the network. ## Quick Start Start a local-mcp session in my project directory and use the MCP tools to read, edit, and test the files with sandboxed permissions.