Sandbox entitlements auditor

Skill a5c-ai/babysitter/library/specializations/desktop-development/skills/sandbox-entitlements-auditor

Audit and recommend minimal sandbox entitlements for secure desktop applicationsFrom its SKILL.md

Install

npx -y skills add a5c-ai/babysitter --skill sandbox-entitlements-auditor

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

SKILL.md

1.5 KB, 216 tokens by cl100k_base, as published. Nobody here has run it

sandbox-entitlements-auditor

Audit existing entitlements and recommend minimal sandbox permissions for secure desktop applications, primarily for macOS but applicable concepts for other platforms.

Capabilities

Analyze current entitlements usage
Detect over-permissioned configurations
Recommend minimal entitlement sets
Check for security anti-patterns
Verify MAS compliance
Generate audit reports

Input Schema

{
  "type": "object",
  "properties": {
    "projectPath": { "type": "string" },
    "entitlementsPath": { "type": "string" },
    "targetDistribution": { "enum": ["mas", "direct", "both"] }
  },
  "required": ["projectPath"]
}

Audit Checks

Unnecessary file system access
Broad network permissions when not needed
Hardened runtime exceptions
JIT compilation allowance
Library validation disabling

Related Skills

macos-entitlements-generator
security-hardening process

What ships with it: 1 file

494 B alongside SKILL.md

README.md494 B