Runwall — DevOps skill for Claude Code
The active firewall and execution governance gateway for AI agents.
How to install Runwall
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open dushyantzz/Runwall and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Runwall does
The active firewall and execution governance gateway for AI agents. Run Cursor, Claude Code, Cline, and custom agents safely on your infrastructure with OPA/Rego policies, real-time risk scoring, taint tracking, and Slack approval workflows.
Alternatives in DevOps
- Claudable — Claudable is an open-source web builder that leverages local CLI agents, such as Claude Code, Codex, Gemini CL 4k ★
- Coi — Give the agent a machine 743 ★
- Second Brain Cloudflare — One memory layer, every AI tool 734 ★
README
Runwall
The Zero-Trust Execution Governance Platform for AI Agents
An intelligent security gateway that sits between AI reasoning models and real-world tools, databases, and environments.
Table of Contents
- Why Runwall?
- High-Level Architecture
- Core Features
- Key Workflows (Diagrams)
- Quick Start
- Client Integration
- Custom Agent Integration (Python)
- REST API & Dashboard
- License & Support
Why Runwall?
Everyone is wiring AI agents into production systems — Jira, Salesforce, internal databases, cloud providers, shell terminals — usually via protocols like the **Model Context Protocol (MCP)**. Unprotected, these connections behave like unlocked servers:
| Risk | Description |
|---|---|
| Infinite Loop Risk | A minor agent logic bug can trigger thousands of API calls in minutes, burning your budget. |
| Prompt Injection Threat | A malicious instruction hidden in a webpage or document can hijack your agent into destructive actions (e.g. "delete all users"). |
| The Trust Gap | Binary tool permissions can't express nuance — "read one record" |
Related Skills
Iterare LLM
Automated, isolated execution of Claude Code prompts in firewall-restricted Docker containers.
AWS Observability Labs
Terraform-driven AWS CloudWatch labs covering governance, dashboards & alarms, CloudWatch Agent, EMF/PutMetric
Opsyra
Autonomous AI Agent & DevOps workspace manager for Telegram. Connects Claude Code, Codex, and Antigravity with
Skill Framework
Organize, validate, and deploy AI agent skills (SKILL.md) at scale — lint rules, token budgets, secrets govern
Claude Code Sandbox
Run Claude Code safely in local Docker containers without having to approve every permission.
Deploy Info
Show what will deploy next — diff staging vs main with issue/PR summary, risk assessment, and deploy checklist
Related Agents
Senior Security Engineer
Senior security engineer covering application security (OWASP-style threat modeling, secure coding, auth desig
Ad User Admin
Active Directory user administration — look up users, read attributes and password-expiry, and perform attribu
Guidewire API Archaeologist
Reviews Guidewire Cloud API mapping correctness, LOB/typelist/custom-entity assumptions, App Events / Integrat