Agent Sandbox
AI agents execute code, modify files, and run shell commands. Without guardrails, a bad prompt or hallucination can delete your database, overwrite production configs, or exfiltrate secrets. This skill builds safety layers — sandboxed execution, filesystem restrictions, network policies, audit trails, and kill switches
概要
Agent Sandbox provides a security framework for AI agents performing technical tasks such as code execution and file modification. Developed within the TerminalSkills/skills repository, this tool addresses risks associated with autonomous agent actions, including potential database deletions or unauthorized secret exfiltration. It implements multiple safety layers, including restricted filesystem access, sandboxed environments, and granular network policies. By establishing these guardrails, the skill ensures that agents operating in environments like Claude or Gemini remain within defined operational boundaries. The system also includes audit trails and emergency kill switches to maintain oversight. This approach allows developers to leverage the power of AI-driven shell commands and file management while mitigating the inherent dangers of hallucinations or unintended prompt execution.
ユースケース
導入方法
# Review source first
open https://github.com/TerminalSkills/skills/blob/main/skills/agent-sandbox/SKILL.mdCopy or clone the skill folder into your agent skills directory after reviewing its instructions and scripts.
セキュリティ
This skill focuses on mitigating risks from AI hallucinations and malicious prompts by enforcing strict execution boundaries. It utilizes filesystem restrictions and network policies to prevent unauthorized data access or exfiltration. Users should review the audit trails provided by the TerminalSkills/skills repository implementation to ensure continuous compliance with security protocols.
関連Skills
Cargo Fuzz
trailofbits/skills
cargo-fuzzは、Cargoを使用するRustプロジェクトにおける事実上の標準的なファジングツールです。libFuzzerバックエンドを使用したRustコードのファジングに使用します。
Yara Rule Authoring
trailofbits/skills
マルウェア識別のための高品質な YARA-X 検知ルールの作成をガイドします。YARA ルールの作成、レビュー、または最適化時に使用します。命名規則、文字列の選択、パフォーマンスの最適化、レガシーな YARA からの移行、および誤検知の削減をカバーしています。トリガー: YARA、YARA-X、malware detection、threat hunting、IOC、signature、crx module、dex module。
Security Audit
TerminalSkills/skills
OWASP Top 10の脆弱性スキャン、既知のCVEに関する依存関係のチェック、流出したシークレットやAPIキーの検出を行い、優先順位付けされた修正案を生成することで、コードベースの包括的なセキュリティ監査を実行します。このスキルは、静的解析パターンと依存関係監査ツールを組み合わせています。