{"id":"8f0ee1ff-185d-4543-8d94-8568301d1ac6","shortId":"ke6vQW","kind":"skill","title":"Restrict outbound domains for GitHub Agentic Workflows before repository agents can browse freely with gh-aw-firewall","tagline":"Run GitHub Agentic Workflow jobs behind a domain allowlist and optional API-key sidecar instead of giving repository agents broad outbound access.","description":"# Restrict outbound domains for GitHub Agentic Workflows before repository agents can browse freely with gh-aw-firewall\n\nRun GitHub Agentic Workflow jobs behind a domain allowlist and optional API-key sidecar instead of giving repository agents broad outbound access.\n\n## Prerequisites\n\nDocker 20.10+, Docker Compose v2, Linux host or compatible runtime\n\n## Installation\n\nRequirements and caveats from upstream:\n- awf runs your command inside a Docker sandbox with three containers:\n- **Docker**: 20.10+ with Docker Compose v2\n- **Node.js**: 20.19.0+ (for building from source)\n\nBasic usage or getting-started notes:\n- **OS**: Ubuntu 22.04+ or compatible Linux distribution (x86_64 and arm64)\n- See [Compatibility](docs/compatibility.md) for full details on supported versions and tested configurations.\n- ## Get started fast\n\n- Source: https://github.com/github/gh-aw-firewall\n- Extracted from upstream docs: https://raw.githubusercontent.com/github/gh-aw-firewall/HEAD/README.md\n\n## Documentation\n\n- https://github.github.com/gh-aw-firewall/\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall/)","tags":["restrict","outbound","domains","for","github","agentic","workflows","before","repository","agents","can","browse"],"capabilities":["skill","source-agentskillexchange","skill-restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,238 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:12:06.590Z","embedding":null,"createdAt":"2026-05-18T13:18:52.349Z","updatedAt":"2026-05-18T19:12:06.590Z","lastSeenAt":"2026-05-18T19:12:06.590Z","tsv":"'/gh-aw-firewall/':170 '/github/gh-aw-firewall':159 '/github/gh-aw-firewall/head/readme.md':166 '/skills/restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall/)':177 '20.10':85,112 '20.19.0':118 '22.04':132 '64':138 'access':41,82 'agent':6,10,21,38,47,51,62,79,172 'agentskillexchange.com':176 'agentskillexchange.com/skills/restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall/)':175 'allowlist':27,68 'api':31,72 'api-key':30,71 'arm64':140 'aw':17,58 'awf':100 'basic':123 'behind':24,65 'broad':39,80 'brows':12,53 'build':120 'caveat':97 'command':103 'compat':92,134,142 'compos':87,115 'configur':152 'contain':110 'detail':146 'distribut':136 'doc':163 'docker':84,86,106,111,114 'docs/compatibility.md':143 'document':167 'domain':3,26,44,67 'exchang':174 'extract':160 'fast':155 'firewal':18,59 'freeli':13,54 'full':145 'get':127,153 'getting-start':126 'gh':16,57 'gh-aw-firewal':15,56 'github':5,20,46,61 'github.com':158 'github.com/github/gh-aw-firewall':157 'github.github.com':169 'github.github.com/gh-aw-firewall/':168 'give':36,77 'host':90 'insid':104 'instal':94 'instead':34,75 'job':23,64 'key':32,73 'linux':89,135 'node.js':117 'note':129 'option':29,70 'os':130 'outbound':2,40,43,81 'prerequisit':83 'raw.githubusercontent.com':165 'raw.githubusercontent.com/github/gh-aw-firewall/head/readme.md':164 'repositori':9,37,50,78 'requir':95 'restrict':1,42 'run':19,60,101 'runtim':93 'sandbox':107 'see':141 'sidecar':33,74 'skill':173 'skill-restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall' 'sourc':122,156,171 'source-agentskillexchange' 'start':128,154 'support':148 'test':151 'three':109 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'ubuntu':131 'upstream':99,162 'usag':124 'v2':88,116 'version':149 'workflow':7,22,48,63 'x86':137","prices":[{"id":"0b4e56ee-f545-4aa3-9747-84136f9eb896","listingId":"8f0ee1ff-185d-4543-8d94-8568301d1ac6","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:18:52.349Z"}],"sources":[{"listingId":"8f0ee1ff-185d-4543-8d94-8568301d1ac6","source":"github","sourceId":"agentskillexchange/skills/restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall","isPrimary":false,"firstSeenAt":"2026-05-18T13:18:52.349Z","lastSeenAt":"2026-05-18T19:12:06.590Z"}],"details":{"listingId":"8f0ee1ff-185d-4543-8d94-8568301d1ac6","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"0fa2725f99782228d9c3054d69faf3a196092719","skill_md_path":"skills/restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Restrict outbound domains for GitHub Agentic Workflows before repository agents can browse freely with gh-aw-firewall","description":"Run GitHub Agentic Workflow jobs behind a domain allowlist and optional API-key sidecar instead of giving repository agents broad outbound access."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall"},"updatedAt":"2026-05-18T19:12:06.590Z"}}