What problem does it solve?
When an OpenShell sandbox blocks a network request with a policy_denied error, work stalls unless someone manually inspects the policy and crafts an exception. This Skill automates the recovery flow so legitimate tasks can proceed with minimal, approved policy changes.
Core Features & Use Cases
- Denial Recovery: Detects policy_denied failures and treats them as recoverable rather than final when the user task still requires the request.
- Policy Inspection: Reads the current sandbox policy from the policy.local endpoint and the policy advisor reference before proposing changes.
- Narrow Proposals: Submits the narrowest possible policy proposal to the policy service, waits for approval, and retries only after policy_reloaded confirmation.
- Use Case: An agent inside a sandbox needs to call an external API but receives policy_denied; the Skill inspects the active policy, proposes access to just that host, waits for approval, and retries the request.
Quick Start
When a sandbox request fails with policy_denied, ask the agent to inspect the current policy and submit a minimal proposal so the blocked request can be retried.
