yapie0/safe-openclaw/execution-isolation

Claude Code and agent skill by yapie0/safe-openclaw

Trust tier 3
  • community
Source check pending

Checking that the SKILL.md file is still in the repository.

Permission-based access control for AI tool calls

Install

npx vskill@latest install yapie0/safe-openclaw/execution-isolation

SKILL.md

Execution Isolation

Enforces filesystem, network, and command policies on all AI tool calls.

Configuration

Add to ~/.openclaw/openclaw.json:

json
{
"plugins": {
"execution-isolation": {
"enforcement": "block",
"defaultAction": "allow",
"filesystem": {
"readAllow": ["~/workspace", "/tmp", "~/.openclaw"],
"writeAllow": ["~/workspace", "/tmp"],
"deny": ["~/.ssh", "~/.aws", "~/.gnupg"]
},
"network": {
"allow": ["api.openai.com", "api.anthropic.com", "*.github.com"],
"deny": ["10.*", "192.168.*", "169.254.*"]
},
"commands": {
"allow": ["node", "python", "git", "pnpm", "npm", "curl"],
"deny": ["sudo", "chmod", "chown"]
}
}
}
}

Policy Precedence

  1. Deny rules always take precedence over allow rules
  2. Tool-specific overrides take precedence over global policy
  3. If no rules match, defaultAction determines the outcome

Security

  • Security scanPassed, 95 of 100Pattern checks on the skill's files.
  • Model reviewPassed

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

Source

Popularity

Repository stars
49
Repository forks
9
Repository npm downloads, 7 days
865
7-day trend score
33

Stars and forks are for the whole GitHub repository, not this skill alone. Downloads are for the repository's npm package. Refreshed 2 Apr 2026, 7 months ago.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/yapie0/safe-openclaw/execution-isolation/badge)](https://verified-skill.com/skills/yapie0/safe-openclaw/execution-isolation)

Something wrong with this skill or its page? Tell us.