cyberbobas

Airlock — AI skill for Claude Code

AI community

Runtime firewall for AI coding agents.

How to install Airlock

This entry records only its repository, not the path inside it, so there is no exact command to give. Open cyberbobas/airlock and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Airlock does

Runtime firewall for AI coding agents. Gate every tool, MCP and skill call against a least-privilege policy.

Alternatives in AI

Open Multi Agent — TypeScript multi-agent orchestration engine — one runTeam() call from goal to result 5.8k ★
Codeseek — Rust-powered code intelligence CLI for AI coding agents 764 ★
Hol Guard — Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, M 485 ★

README

Airlock, a runtime firewall for AI coding agents

[![PyPI](https://img.shields.io/pypi/v/airlock-agent?color=8b7cf6)](https://pypi.org/project/airlock-agent/) [![tests](https://github.com/cyberbobas/airlock/actions/workflows/tests.yml/badge.svg)](https://github.com/cyberbobas/airlock/actions/workflows/tests.yml) [![Python](https://img.shields.io/pypi/pyversions/airlock-agent)](https://pypi.org/project/airlock-agent/) [![License](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE)

Gate every tool call, MCP call and skill your agent runs against a least-privilege policy. Static scanners check a skill once, before install. Airlock sits in the call path and decides **this call, right now**. That is where a skill that reads clean and behaves badly actually gets stopped.

Part of [Agentoffense](https://agentoffense.com/solutions/airlock_ai/).

![Airlock blocks a poisoned skill stealing an SSH key](docs/airlock-demo.gif)

 agent ──native tools──▶ [PreToolUse hook] ─┐
                                            ├─▶ policy ─▶ allow / ask / block
 agent ──MCP stdio──▶ [airlock-mcp] ──▶ server ─┘         │
                                                          ▼
                                          audit.jsonl (hash-chained, signable)

Install

**One command:**

# Linux / macOS
curl -fsSL https://raw.githubusercontent.com/cyberbobas/airlock/main/install.sh | sh

# Windows (PowerShell)
irm https://raw.githubusercontent.com/cyberbobas/airlock/main/install.ps1 | iex

**Or with your own package manager:**

pipx install airlock-agent      # or: uv tool install airlock-agent / pip install airlock-agent
brew tap cyberbobas/tap && brew install airlock   # macOS

Then:

airlock demo                    # watch it stop a key-theft (nothing of yours touched)
airlock init                    # wire the hook, wrap every agent's MCP servers
airlock doctor                  # confirm what is actually enforcing
`