seatbelt-sandboxer

The seatbelt-sandboxer skill helps generate minimal macOS Seatbelt sandbox configurations for applications that need to run with restricted permissions. Its primary purpose is to support allowlist-based sandboxing, where only explicitly permitted resources and operations are available to a process. By starting from a deny-all baseline and progressively granting only the access an application requires, the skill assists in reducing the attack surface of macOS applications and improving defense-in-depth against potential security threats, including supply chain risks.

The skill follows a structured profiling methodology that evaluates application requirements across multiple resource categories, including file access, networking, process management, Mach IPC, POSIX IPC, system information, hardware access, notifications, AppleEvents, dynamic code generation, and more. It guides users through identifying required permissions, defining specific scopes such as file paths or services, and building minimal Seatbelt profiles with a deny-by-default approach. For applications with multiple subcommands that perform different operations, the skill recommends profiling each subcommand separately and creating dedicated sandbox configurations.

This skill is intended for developers, security engineers, system administrators, and macOS users who need to isolate applications or restrict their access to system resources. Common use cases include sandboxing development tools, limiting network or filesystem access for applications, and creating additional security controls around software execution. It is specifically designed for macOS environments using Seatbelt and is not intended for Linux container technologies, Windows applications, or software that requires broad unrestricted system access.