Agent Sandbox
AI agents execute code, modify files, and run shell commands. Without guardrails, a bad prompt or hallucination can delete your database, overwrite production configs, or exfiltrate secrets. This skill builds safety layers — sandboxed execution, filesystem restrictions, network policies, audit trails, and kill switches
概览
Agent Sandbox provides a security framework for AI agents performing technical tasks such as code execution and file modification. Developed within the TerminalSkills/skills repository, this tool addresses risks associated with autonomous agent actions, including potential database deletions or unauthorized secret exfiltration. It implements multiple safety layers, including restricted filesystem access, sandboxed environments, and granular network policies. By establishing these guardrails, the skill ensures that agents operating in environments like Claude or Gemini remain within defined operational boundaries. The system also includes audit trails and emergency kill switches to maintain oversight. This approach allows developers to leverage the power of AI-driven shell commands and file management while mitigating the inherent dangers of hallucinations or unintended prompt execution.
使用场景
安装说明
# Review source first
open https://github.com/TerminalSkills/skills/blob/main/skills/agent-sandbox/SKILL.mdCopy or clone the skill folder into your agent skills directory after reviewing its instructions and scripts.
安全提示
This skill focuses on mitigating risks from AI hallucinations and malicious prompts by enforcing strict execution boundaries. It utilizes filesystem restrictions and network policies to prevent unauthorized data access or exfiltration. Users should review the audit trails provided by the TerminalSkills/skills repository implementation to ensure continuous compliance with security protocols.
相关 Skills
Cargo Fuzz
trailofbits/skills
cargo-fuzz 是使用 Cargo 的 Rust 项目的事实标准模糊测试工具。用于通过 libFuzzer 后端对 Rust 代码进行模糊测试。
Yara Rule Authoring
trailofbits/skills
指导编写用于恶意软件识别的高质量 YARA-X 检测规则。在编写、审查或优化 YARA 规则时使用。涵盖命名规范、字符串选择、性能优化、从旧版 YARA 迁移以及减少误报。触发词:YARA、YARA-X、恶意软件检测、威胁狩猎、IOC、签名、crx 模块、dex 模块。
Agentforce D360 Analyze
forcedotcom/sf-skills
单个 Agentforce 会话的 Data Cloud 360° 视图。当用户要求通过会话 ID(Agent Session UUID `019d…` 或 MessagingSession ID `0Mw…`)追踪、检查、总结或描述特定的 Agentforce 会话时,TRIGGER。当用户尚无会话 ID 时,也会在会话发现(按时间、代理、渠道、结果或对话文本查找/列出/搜索会话)时触发。对于设计时架构问题(请改用 agentforce-architecture-analyze)或运行时性能/日志,请 NOT TRIGGER。
Security Audit
TerminalSkills/skills
通过扫描 OWASP Top 10 漏洞、检查依赖项中的已知 CVE、检测泄露的机密和 API 密钥,并生成优先修复建议,对代码库进行全面的安全审计。此技能结合了静态分析模式与依赖项审计工具。