Menu
Demonstrate and explain the contained agent runtime's filesystem and network boundaries.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Analyze the workshop application log from inside OpenShell and produce incident artifacts.
Interpret traces from a parent Deep Agent and subagents running inside OpenShell.
Use for analyzing application logs with Python inside the OpenShell sandbox and producing incident reports.
Use for interpreting LangSmith traces, adding useful metadata, and comparing agent runs.
Use for safe OpenShell policy-boundary demos and denied-operation analysis.
| name | openshell-policy |
| description | Demonstrate and explain the contained agent runtime's filesystem and network boundaries. |
/app is read-only source, while /sandbox and /tmp are writable./home/sandbox is owned by the sandbox runtime user but is read-only under
the OpenShell filesystem policy. Use it for the expected-denial demonstration
so ordinary Unix ownership is not mistaken for the policy boundary.