Secure Sandbox Execution Skill

A security-focused execution environment inspired by OpenClaw's exec-approvals and ZeroClaw's secure-by-default runtime. This skill provides guardrails for running commands safely with approval workflows, allowlisting, and comprehensive audit logging.

Purpose

When enabled, this skill intercepts command execution and:

1. Detects dangerous operations (destructive commands, system modifications)
2. Enforces allowlists (only pre-approved commands run automatically)
3. Queues approvals (suspicious commands wait for user review)
4. Creates audit trails (every command is logged with context)
5. Provides dry-run mode (preview effects before execution)

Architecture