Deny-by-default, capability-scoped execution for AgentSkills scripts. On macOS, wraps scripts in a generated sandbox-exec (Seatbelt) profile derived from the skill's declared capabilities intersected with a configured ceiling; robot_lab core runs unconfined until this gem is required.

Required Ruby Version

>= 3.2.0

Authors

Dewayne VanHoozer

Versions

  1. 0.3.0

    1. source

      1. 0.3.0 source September 18, 2026 (24 KB)
  2. 0.2.8

    1. source

      1. 0.2.8 source September 09, 2026 (24 KB)

Pushed by

madbomber

SHA 256 checksum

← Previous version