Seatbelt Sandboxer

Skill Verified Active

Generates minimal macOS Seatbelt sandbox configurations. Use when sandboxing, isolating, or restricting macOS applications with allowlist-based profiles.

Purpose

To enable users to create secure, allowlist-based sandbox configurations for macOS applications, enhancing isolation and defense-in-depth.

Features

Generates minimal macOS Seatbelt sandbox profiles
Provides step-by-step profiling methodology
Details file read/write and network access configurations
Includes iterative testing guidance and common failure modes

Use Cases

Sandboxing macOS applications
Isolating applications with restricted file/network access
Creating defense-in-depth profiles against supply chain attacks

Non-Goals

Sandboxing Linux containers
Generating configurations for Windows applications
Applying sandboxing to applications requiring broad system access

Trust

info:Issues Attention13 issues opened, 4 closed in last 90 days. Closure rate is 23.5%.

Installation

First, add the marketplace

/plugin marketplace add trailofbits/skills

/plugin install seatbelt-sandboxer@trailofbits

Quality Score

Verified

97 /100

Analyzed about 14 hours ago

Trust Signals

Last commit3 days ago

GitHub owner trailofbits

Stars5.2k

LicenseCC-BY-SA-4.0

Status

View Source

Similar Extensions

Setup Tailwind Typescript

100

Configure Tailwind CSS with TypeScript in a Next.js or React project. Covers installation, configuration, custom theme extensions, component patterns, and type-safe styling utilities. Use when adding Tailwind CSS to an existing TypeScript project, customizing the Tailwind theme for a project's design system, setting up type-safe component styling patterns, or configuring Tailwind plugins and extensions.

Skill

pjt222

Setup

100

Use first for install/update routing — sends setup, doctor, or MCP requests to the correct OMC setup flow

Skill

Yeachan-Heo

Mcp Setup

100

Configure popular MCP servers for enhanced agent capabilities

Skill

Yeachan-Heo

Running Claude Code Via Litellm Copilot

100

Use when routing Claude Code through a local LiteLLM proxy to GitHub Copilot, reducing direct Anthropic spend, configuring ANTHROPIC_BASE_URL or ANTHROPIC_MODEL overrides, or troubleshooting Copilot proxy setup failures such as model-not-found, no localhost traffic, or GitHub 401/403 auth errors.

Skill

xixu-me

Sync Setup

100

Use when the user wants to set up config sync for the first time, connect to GitHub, or re-initialize the backup repo.

Skill

rohithzr

Sync Pull

100

Use when the user wants to restore, download, or pull their Claude Code config from GitHub onto this machine.

Skill

rohithzr