{"id":"04f3c19c-4f50-4b23-ac4a-2551e2c2db13","shortId":"r4Dvaa","kind":"skill","title":"Run agent CLIs in a capability-based local sandbox with snapshots and controlled egress using nono","tagline":"Constrain Claude Code, Codex, OpenClaw, and similar agent CLIs inside a kernel-enforced local sandbox with explicit filesystem, network, credential, and snapshot controls.","description":"# Run agent CLIs in a capability-based local sandbox with snapshots and controlled egress using nono\n\nConstrain Claude Code, Codex, OpenClaw, and similar agent CLIs inside a kernel-enforced local sandbox with explicit filesystem, network, credential, and snapshot controls.\n\n## Prerequisites\n\nnono plus a supported local agent CLI such as Claude Code, Codex, OpenClaw, or another profiled tool.\n\n## Installation\n\nRequirements and caveats from upstream:\n- Also available as [Python](https://github.com/always-further/nono-py) , [TypeScript](https://github.com/always-further/nono-ts), [Go](https://github.com/always-further/nono-go) bindings.\n- We encourage using AI tools to contribute. However, you must understand and carefully review any AI-generated code before submitting. Security is paramount. If you don't understand how a change works, ask in [Discord]...\n\nBasic usage or getting-started notes:\n- **nono registry** — The nono registry is now in alpha and available to try out. Host your skills, hooks, policies, and more in your own repository, then securely distribute them through the registry. This gives you th...\n- Profiles for [Claude Code](https://docs.nono.sh/cli/clients/claude-code), [Codex](https://docs.nono.sh/cli/clients/codex), [OpenCode](https://docs.nono.sh/cli/clients/opencode), [OpenClaw](https://docs.nono.sh/cli/cli...\n- ## Libraries and Bindings\n\n- Source: https://github.com/always-further/nono\n- Extracted from upstream docs: https://raw.githubusercontent.com/always-further/nono/HEAD/README.md\n\n## Documentation\n\n- https://nono.sh\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono/)","tags":["run","agent","clis","capability","based","local","sandbox","with","snapshots","and","controlled","egress"],"capabilities":["skill","source-agentskillexchange","skill-run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,741 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:12:09.504Z","embedding":null,"createdAt":"2026-05-18T13:18:56.132Z","updatedAt":"2026-05-18T19:12:09.504Z","lastSeenAt":"2026-05-18T19:12:09.504Z","tsv":"'/always-further/nono':227 '/always-further/nono-go)':121 '/always-further/nono-py)':113 '/always-further/nono-ts),':117 '/always-further/nono/head/readme.md':234 '/cli/cli...':220 '/cli/clients/claude-code),':208 '/cli/clients/codex),':212 '/cli/clients/opencode),':216 '/skills/run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono/)':243 'agent':2,25,43,66,89,238 'agentskillexchange.com':242 'agentskillexchange.com/skills/run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono/)':241 'ai':126,139 'ai-gener':138 'alpha':174 'also':107 'anoth':98 'ask':156 'avail':108,176 'base':8,49 'basic':159 'bind':122,223 'capability-bas':6,47 'capabl':7,48 'care':135 'caveat':104 'chang':154 'claud':19,60,93,204 'cli':90 'clis':3,26,44,67 'code':20,61,94,141,205 'codex':21,62,95,209 'constrain':18,59 'contribut':129 'control':14,41,55,82 'credenti':38,79 'discord':158 'distribut':193 'doc':231 'docs.nono.sh':207,211,215,219 'docs.nono.sh/cli/cli...':218 'docs.nono.sh/cli/clients/claude-code),':206 'docs.nono.sh/cli/clients/codex),':210 'docs.nono.sh/cli/clients/opencode),':214 'document':235 'egress':15,56 'encourag':124 'enforc':31,72 'exchang':240 'explicit':35,76 'extract':228 'filesystem':36,77 'generat':140 'get':163 'getting-start':162 'github.com':112,116,120,226 'github.com/always-further/nono':225 'github.com/always-further/nono-go)':119 'github.com/always-further/nono-py)':111 'github.com/always-further/nono-ts),':115 'give':199 'go':118 'hook':183 'host':180 'howev':130 'insid':27,68 'instal':101 'kernel':30,71 'kernel-enforc':29,70 'librari':221 'local':9,32,50,73,88 'must':132 'network':37,78 'nono':17,58,84,166,169 'nono.sh':236 'note':165 'openclaw':22,63,96,217 'opencod':213 'paramount':146 'plus':85 'polici':184 'prerequisit':83 'profil':99,202 'python':110 'raw.githubusercontent.com':233 'raw.githubusercontent.com/always-further/nono/head/readme.md':232 'registri':167,170,197 'repositori':190 'requir':102 'review':136 'run':1,42 'sandbox':10,33,51,74 'secur':144,192 'similar':24,65 'skill':182,239 'skill-run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono' 'snapshot':12,40,53,81 'sourc':224,237 'source-agentskillexchange' 'start':164 'submit':143 'support':87 'th':201 'tool':100,127 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'tri':178 'typescript':114 'understand':133,151 'upstream':106,230 'usag':160 'use':16,57,125 'work':155","prices":[{"id":"bb7144d6-7e9c-4267-9be4-9c78633e2522","listingId":"04f3c19c-4f50-4b23-ac4a-2551e2c2db13","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:18:56.132Z"}],"sources":[{"listingId":"04f3c19c-4f50-4b23-ac4a-2551e2c2db13","source":"github","sourceId":"agentskillexchange/skills/run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono","isPrimary":false,"firstSeenAt":"2026-05-18T13:18:56.132Z","lastSeenAt":"2026-05-18T19:12:09.504Z"}],"details":{"listingId":"04f3c19c-4f50-4b23-ac4a-2551e2c2db13","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"154168ec3793c7aa02453f136584165a1199318a","skill_md_path":"skills/run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Run agent CLIs in a capability-based local sandbox with snapshots and controlled egress using nono","description":"Constrain Claude Code, Codex, OpenClaw, and similar agent CLIs inside a kernel-enforced local sandbox with explicit filesystem, network, credential, and snapshot controls."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/run-agent-clis-in-a-capability-based-local-sandbox-with-snapshots-and-controlled-egress-using-nono"},"updatedAt":"2026-05-18T19:12:09.504Z"}}