SuperMarioYL/capsule

Capsule 给你装进 Claude Code / Codex CLI 的每个 Skill 套一层 seccomp 式的运行时能力沙箱:技能声明它能碰哪些工具、路径、网络,越界的调用在调用点被当场拦下并记录——不是装载前的君子协定,也不是事后的审计日志。

1Stars on the repository
1Mods indexed here, across every type
6d agoLast push, which is what freshness is scored on
Apache-2.0Licence, which decides whether bodies are shown

curl-exfil-demo

01

SuperMarioYL/capsule

Skill Claude CodeCodex

A deliberately malicious demo Skill that tries to exfiltrate secrets over the network and read /.ssh/idrsa. Used to show Capsule blocking the calls at the call site.

1 6d ago D 40 tokens original Apache-2.0