trailofbits / skills / seatbelt-sandboxer Lock down a macOS app with a sandbox profile Generates a minimal Seatbelt sandbox config that restricts app permissions to only what it needs—file access, network, system calls—with an allowlist approach.
Best for: Engineers hardening a macOS app or enforcing least-privilege access controls.
Engineering / debugging-investigation atomic for-engineers no-setup from-text
Source Creator's repository · trailofbits/skills
License: CC-BY-SA-4.0
Security Verified — safe to install
Passed all 3 independent security checks
Checked by 3 independent security firms
Does it try to trick the AI? No SAFE · Gen Agent Trust Hub
Does it sneak in hidden code? No No alerts · Socket
Does it have known bugs? No Low risk · Snyk
Generates a minimal Seatbelt sandbox config that restricts app permissions to only what it needs—file access, network, system calls—with an allowlist approach.
↓ Download .skillDrag into Cowork or Claude Desktop — no terminal needed.
Open in Claude Code →
Copy install command→
3,009 installs
More from trailofbits all →