Openshell Policy Advisor
DevOps & Securityopenshell-policy-advisorOpenshell Policy Advisor is an Agent Skill for devops & security published in the NVIDIA/OpenShell repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.
Use when an OpenShell sandbox returns policy_denied, mentions policy.local, or needs a narrow network policy proposal.
How to use this skill
Bring this guide into your coding agent with a prompt tailored to the tool you use.
- Open your project in Codex.
- Copy and paste the prompt below.
- Review files and risks before approving any action.
Inspect the Agent Skill at https://github.com/NVIDIA/OpenShell/blob/HEAD/crates/openshell-supervisor-process/src/skills/policy-advisor/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/openshell-policy-advisor, but wait for my approval before writing files or running scripts.
Copying this prompt does not install or run the skill. Review third-party files before use.
OpenShell Policy Advisor
When a request fails with policy_denied, do not treat the denial as final if the user task still needs the request. Read /etc/openshell/skills/policy_advisor.md, inspect http://policy.local/v1/policy/current, submit the narrowest proposal to http://policy.local/v1/proposals, wait on /v1/proposals/{chunk_id}/wait?timeout=300, and retry only after approval with policy_reloaded: true.