Skillget

genpark-sandbox-syscall-seccomp-policy-generator-skill

mcp
Guvenlik Denetimi
Uyari
Health Uyari
  • No license — Repository has no license file
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 8 GitHub stars
Code Gecti
  • Code scan — Scanned 4 files during light audit, no dangerous patterns found
Permissions Gecti
  • Permissions — No dangerous permissions requested

Bu listing icin henuz AI raporu yok.

SUMMARY

GenPark AI Agent Skill - Generates least-privilege Linux Seccomp BPF syscall filter profiles and blocks prohibited socket/ptrace operations.

README.md

GenPark AI Agent Skill - Sandbox Syscall Seccomp Policy Generator

Synthesizes least-privilege Linux Seccomp BPF JSON policies blocking dangerous syscalls (ptrace, bpf, kexec) in AI execution environments.

Verified by GenPark AI and compatible with Model Context Protocol (MCP).

Architecture Diagram

graph TD
    A[Runtime Target: Python / Node / Rust] --> B[Seccomp Policy Generator Engine]
    B --> C[Whitelisted Safe POSIX Syscalls: read, write, mmap]
    B --> D[Blacklisted Fatal Syscalls: ptrace, reboot, mount]
    C --> E[Assemble OCI/Docker Compatible Seccomp JSON Profile]
    D --> E
    E --> F[Inject into Container / MicroVM Kernel Boundary]

Features

  • Deterministic Action Boundaries: Default SCMP_ACT_ERRNO blocks unclassified syscalls gracefully.
  • Immediate Process Termination on Exploit: Prohibits kernel debug injection attacks.
  • Zero External Dependencies: Pure Python standard library implementation.

Yorumlar (0)

Sonuc bulunamadi