sandbox-entitlements-auditor

SkillDev tools

Audit and recommend minimal sandbox entitlements for secure desktop applications

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Account requirements not reviewed. Check the skill instructions before use; ahel provides instructions and does not run this skill.

Add ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

Then ask your AI: use the sandbox-entitlements-auditor skill

What this skill tells your AI

The instructions your AI receives, as published by a5c-ai/babysitter in library/specializations/desktop-development/skills/sandbox-entitlements-auditor/SKILL.md and read by ahel’s review.

Audit existing entitlements and recommend minimal sandbox permissions for secure desktop applications, primarily for macOS but applicable concepts for other platforms.

Capabilities

Analyze current entitlements usage
Detect over-permissioned configurations
Recommend minimal entitlement sets
Check for security anti-patterns
Verify MAS compliance
Generate audit reports

Input Schema

{
  "type": "object",
  "properties": {
    "projectPath": { "type": "string" },
    "entitlementsPath": { "type": "string" },
    "targetDistribution": { "enum": ["mas", "direct", "both"] }
  },
  "required": ["projectPath"]
}

Audit Checks

Unnecessary file system access
Broad network permissions when not needed
Hardened runtime exceptions
JIT compilation allowance
Library validation disabling

Related Skills

macos-entitlements-generator
security-hardening process

Signals

GitHub stars: 2k
Forks: 112
Last commit: Sep 2026

Advanced

Item type: skill
Key: sandbox-entitlements-auditor
Source: github.com/a5c-ai/babysitter

github.com/a5c-ai/babysitter