Sandbox entitlements auditor

Skill a5c-ai/babysitter/library/specializations/desktop-development/skills/sandbox-entitlements-auditor

Babysitter enforces obedience on agentic workforces and enables them to manage extremely complex tasks and workflows through deterministic, hallucination-free self-orchestration

Install

npx -y skills add a5c-ai/babysitter --skill sandbox-entitlements-auditor

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

What its author says it does

Copied from the file, not written here

Audit and recommend minimal sandbox entitlements for secure desktop applications

SKILL.md

1.5 KB, as published. Nobody here has run it

sandbox-entitlements-auditor

Audit existing entitlements and recommend minimal sandbox permissions for secure desktop applications, primarily for macOS but applicable concepts for other platforms.

Capabilities

Analyze current entitlements usage
Detect over-permissioned configurations
Recommend minimal entitlement sets
Check for security anti-patterns
Verify MAS compliance
Generate audit reports

Input Schema

{
  "type": "object",
  "properties": {
    "projectPath": { "type": "string" },
    "entitlementsPath": { "type": "string" },
    "targetDistribution": { "enum": ["mas", "direct", "both"] }
  },
  "required": ["projectPath"]
}

Audit Checks

Unnecessary file system access
Broad network permissions when not needed
Hardened runtime exceptions
JIT compilation allowance
Library validation disabling

Related Skills

macos-entitlements-generator
security-hardening process