Configures secure sandboxing and process isolation for Gemini CLI using Docker, Podman, and macOS Seatbelt.
This skill serves as the central authority for managing the security boundaries of Gemini CLI. It enables developers to isolate potentially hazardous operations from the host system through various methods, including containerization via Docker and Podman or process-level sandboxing on macOS using Seatbelt profiles. By providing structured guidance on environment variables, command flags, and configuration files, it ensures that automated code execution remains within safe boundaries while offering troubleshooting steps for permission-related issues and environment setup.
Key Features
01Detailed troubleshooting for permission errors and container connectivity
02Comprehensive environment variable and settings.json configuration
03Granular macOS Seatbelt profile management for process-level security
04Automated delegation to official Gemini documentation for up-to-date syntax
051 GitHub stars
06Multi-platform isolation support via Docker and Podman
Use Cases
01Enabling safe execution of untrusted code snippets via Gemini CLI
02Configuring rootless container isolation using Podman in sensitive environments
03Hardening macOS developer environments with restrictive Seatbelt network profiles
