sandbox-guard

Sandbox configuration auditing scans your setup to identify high-risk commands, dangerous parameters, and potential data exfiltration vectors. It reviews command-line security and file system access controls to pinpoint vulnerabilities before deployment.

Generating least-privilege policies involves creating granular security rules including command allowlists and denylists. The skill provides minimal privilege recommendations with actionable remediation plans to tighten command execution security.

Sandbox hardening secures containerized environments by enforcing directory access controls and network restrictions. It intercepts dangerous operations like unauthorized file deletions and generates validator rules to block risky command-line actions.

Yes, security auditing applies directly to automated workflows before deployment. You can review new workflows to identify potential vulnerabilities and receive concrete suggestions for tightening configurations to a least-privilege model.

Allowlists and denylists restrict command execution but require careful tuning to avoid blocking legitimate workflow actions. The skill generates granular policies and actionable remediation plans to balance strict security with operational functionality.