More screenshots
Works with the AI Agents you already use
Claude Code
Cursor
Codex CLI
Muse
Dots+22 moreClaude CodeCursorCodex CLIMuseDots
OpenClaw
Manus
Grok
Grok Bot+18 agentsSkillJail Pro — 10 Tested Security Profiles
Ten hardened, kernel-verified least-privilege profiles for common skills.
$5.99
SkillJail Pro — 10 Tested Security Profiles
Example session with this skill installed
Lock down my Postgres reporting skill with least privilege so it can run its queries but can't exfiltrate the database if it's ever prompt-injected.
- Read your context and instructions
- Compiled the skilljail pro
Summary
Drop in the postgres-query profile. The skill can reach only your database host; a dump to anywhere else is blocked, and it can't read credentials on disk.
The profile (skilljail.yaml):
permissions:
fs: { read: ["$WORKSPACE"], write: ["$WORKSPACE/out"] }
net: { allow: ["*.rds.amazonaws.com", "*.supabase.co", "*.neon.tech"] }
exec: { allow: ["psql", "python3", "cat", "grep", "awk", "sort", "cut"], shell: true }
env: { pass: ["DATABASE_URL", "PGPASSWORD"] }
Verified under the kernel (scripts/verify.sh):
=== postgres-query ===
[ok] manifest valid
[ok] legit workflow ran clean
[ok] attack A blocked: ~/.aws/credentials unreadable
[ok] attack B blocked: disallowed binary (nc) cannot exec
ALL PROFILES PASS
Exfiltration attempt to an un-allowed host (denied):
curl: (56) CONNECT tunnel failed, response 403
[skilljail] net deny: CONNECT attacker-exfil.example.com:443 — no net.allow rule matches
Next steps
- Edit
net.allowto your real DB host and you're done; repeat for the other 9 skills.
Connects securely to your tools. The creator never sees your data.
About this skill
SkillJail (free) jails any skill to exactly what it declares, enforced at the kernel. The fiddly part is writing a manifest that is tight enough to stop an attack but loose enough that the real skill still works — too loose and it is useless, too tight and the skill breaks on a missing cat or a git re-exec. This pack does that work for you, for the ten skill types people actually run, and proves each one under the kernel.
Profiles included: git-commit · github-pr · postgres-query · s3-sync · api-request · slack-webhook · web-scrape · csv-transform · json-transform · npm-build
Each ships a ready manifest (skilljail.yaml), an example SKILL.md, and a legit.sh you can run under the jail to confirm it works on your machine. Every one is verified: the real workflow runs clean, reading ~/.aws/credentials is denied, a disallowed network binary is denied, and network-restricted profiles block egress to any host outside their allowlist.
Also included:
- HARDENING.md — how to write and tune your own tight manifests (the macOS git-shim gotcha, the exec-allowlist rules, CI patterns)
- catalog.md — each profile's protection summary and verification result
- scripts/verify.sh — re-run the legit-plus-attacks check on any profile, on your machine
Requires SkillJail (free, Apache-2.0). Commercial license; redistribution of the pack is not permitted.
How to use
Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scanned
Verified clean 10 days ago
- Passed all security checks, Safe to install
Requires
Python