Skillget

genpark-sandbox-syscall-seccomp-policy-generator-skill

mcp
Security Audit
Warn
Health Warn
  • No license — Repository has no license file
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 8 GitHub stars
Code Pass
  • Code scan — Scanned 4 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

GenPark AI Agent Skill - Generates least-privilege Linux Seccomp BPF syscall filter profiles and blocks prohibited socket/ptrace operations.

README.md

GenPark AI Agent Skill - Sandbox Syscall Seccomp Policy Generator

Synthesizes least-privilege Linux Seccomp BPF JSON policies blocking dangerous syscalls (ptrace, bpf, kexec) in AI execution environments.

Verified by GenPark AI and compatible with Model Context Protocol (MCP).

Architecture Diagram

graph TD
    A[Runtime Target: Python / Node / Rust] --> B[Seccomp Policy Generator Engine]
    B --> C[Whitelisted Safe POSIX Syscalls: read, write, mmap]
    B --> D[Blacklisted Fatal Syscalls: ptrace, reboot, mount]
    C --> E[Assemble OCI/Docker Compatible Seccomp JSON Profile]
    D --> E
    E --> F[Inject into Container / MicroVM Kernel Boundary]

Features

  • Deterministic Action Boundaries: Default SCMP_ACT_ERRNO blocks unclassified syscalls gracefully.
  • Immediate Process Termination on Exploit: Prohibits kernel debug injection attacks.
  • Zero External Dependencies: Pure Python standard library implementation.

Reviews (0)

No results found