{"id":"f1d1fb2b-5118-4ec7-99e4-e1ec90f3169b","shortId":"bPWdDs","kind":"skill","title":"Wrap local coding agents in deny-by-default least-privilege sandboxes with Greywall","tagline":"Run Claude Code, Codex, Cursor, or similar local agent CLIs inside a host-local sandbox that learns required access and blocks everything else by default.","description":"# Wrap local coding agents in deny-by-default least-privilege sandboxes with Greywall\n\nRun Claude Code, Codex, Cursor, or similar local agent CLIs inside a host-local sandbox that learns required access and blocks everything else by default.\n\n## Prerequisites\n\nGreywall CLI, local shell access, a supported local coding agent such as Claude Code, Codex, Cursor, Aider, Gemini CLI, or OpenCode, Linux or macOS host\n\n## Installation\n\nUse the upstream install or setup path that matches your environment:\n- brew tap greyhavenhq/tap\n- brew install greywall\n- go install github.com/GreyhavenHQ/greywall/cmd/greywall@latest\n- git clone https://github.com/GreyhavenHQ/greywall\n\nRequirements and caveats from upstream:\n- **No containers required** — kernel-enforced sandboxing without Docker overhead\n- Greywall ships with built-in sandbox profiles for popular AI coding agents (Claude Code, Codex, Cursor, Aider, Goose, Gemini CLI, OpenCode, Amp, Cline, Copilot, Kilo, Auggie, Droid) and toolchains (Node, Python, Go, R...\n\nBasic usage or getting-started notes:\n- greywall -- curl https://example.com\n- **Homebrew (macOS):**\n- bash\n\n- Source: https://github.com/GreyhavenHQ/greywall\n- Extracted from upstream docs: https://raw.githubusercontent.com/GreyhavenHQ/greywall/HEAD/README.md\n\n## Documentation\n\n- https://docs.greywall.io/greywall/platform-support\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall/)","tags":["wrap","local","coding","agents","deny","default","least","privilege","sandboxes","with","greywall","skills"],"capabilities":["skill","source-agentskillexchange","skill-wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,510 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:13:10.395Z","embedding":null,"createdAt":"2026-05-18T13:20:25.522Z","updatedAt":"2026-05-18T19:13:10.395Z","lastSeenAt":"2026-05-18T19:13:10.395Z","tsv":"'/greyhavenhq/greywall':136,202 '/greyhavenhq/greywall/cmd/greywall@latest':131 '/greyhavenhq/greywall/head/readme.md':209 '/greywall/platform-support':213 '/skills/wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall/)':220 'access':35,76,88 'agent':4,24,45,65,93,164,215 'agentskillexchange.com':219 'agentskillexchange.com/skills/wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall/)':218 'ai':162 'aider':100,169 'amp':174 'auggi':178 'bash':198 'basic':186 'block':37,78 'brew':121,124 'built':156 'built-in':155 'caveat':139 'claud':17,58,96,165 'cli':85,102,172 'cline':175 'clis':25,66 'clone':133 'code':3,18,44,59,92,97,163,166 'codex':19,60,98,167 'contain':143 'copilot':176 'curl':194 'cursor':20,61,99,168 'default':9,41,50,82 'deni':7,48 'deny-by-default':6,47 'doc':206 'docker':150 'docs.greywall.io':212 'docs.greywall.io/greywall/platform-support':211 'document':210 'droid':179 'els':39,80 'enforc':147 'environ':120 'everyth':38,79 'example.com':195 'exchang':217 'extract':203 'gemini':101,171 'get':190 'getting-start':189 'git':132 'github.com':130,135,201 'github.com/greyhavenhq/greywall':134,200 'github.com/greyhavenhq/greywall/cmd/greywall@latest':129 'go':127,184 'goos':170 'greyhavenhq/tap':123 'greywal':15,56,84,126,152,193 'homebrew':196 'host':29,70,108 'host-loc':28,69 'insid':26,67 'instal':109,113,125,128 'kernel':146 'kernel-enforc':145 'kilo':177 'learn':33,74 'least':11,52 'least-privileg':10,51 'linux':105 'local':2,23,30,43,64,71,86,91 'maco':107,197 'match':118 'node':182 'note':192 'opencod':104,173 'overhead':151 'path':116 'popular':161 'prerequisit':83 'privileg':12,53 'profil':159 'python':183 'r':185 'raw.githubusercontent.com':208 'raw.githubusercontent.com/greyhavenhq/greywall/head/readme.md':207 'requir':34,75,137,144 'run':16,57 'sandbox':13,31,54,72,148,158 'setup':115 'shell':87 'ship':153 'similar':22,63 'skill':216 'skill-wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall' 'sourc':199,214 'source-agentskillexchange' 'start':191 'support':90 'tap':122 'toolchain':181 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'upstream':112,141,205 'usag':187 'use':110 'without':149 'wrap':1,42","prices":[{"id":"4119c5bf-8346-45ae-a3d4-782df03ada71","listingId":"f1d1fb2b-5118-4ec7-99e4-e1ec90f3169b","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:20:25.522Z"}],"sources":[{"listingId":"f1d1fb2b-5118-4ec7-99e4-e1ec90f3169b","source":"github","sourceId":"agentskillexchange/skills/wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall","isPrimary":false,"firstSeenAt":"2026-05-18T13:20:25.522Z","lastSeenAt":"2026-05-18T19:13:10.395Z"}],"details":{"listingId":"f1d1fb2b-5118-4ec7-99e4-e1ec90f3169b","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"057dc044b733645825ddbdc87507eb46767e9906","skill_md_path":"skills/wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Wrap local coding agents in deny-by-default least-privilege sandboxes with Greywall","description":"Run Claude Code, Codex, Cursor, or similar local agent CLIs inside a host-local sandbox that learns required access and blocks everything else by default."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/wrap-local-coding-agents-in-deny-by-default-least-privilege-sandboxes-with-greywall"},"updatedAt":"2026-05-18T19:13:10.395Z"}}