Agentjail banner
LuD1161 LuD1161

Agentjail

Development community

Description

Policy guardrails for coding agents (Claude Code, Codex, Cursor) — every tool call is checked locally, before it runs.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

agentjail

Policy guardrails for coding agents - _your agent literally can't do that_

A safety rail for Claude Code, Codex, and Cursor.
Catches the accidental foot-gun **before it fires** - no changes to how you use your agent.

[![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-brightgreen.svg)](LICENSE)  ![v1.4.1](https://img.shields.io/badge/v1.4.1-released-orange)  ![Platform](https://img.shields.io/badge/platform-macOS%20%C2%B7%20Linux-555)  [![Follow @agentjail](https://img.shields.io/badge/follow-%40agentjail-1DA1F2?style=flat&logo=x&logoColor=white)](https://twitter.com/agentjail)  [![Hits](https://hits.sh/github.com/LuD1161/agentjail.svg?style=flat&label=views)](https://hits.sh/github.com/LuD1161/agentjail/)  [![GitHub downloads](https://img.shields.io/github/downloads/LuD1161/agentjail/total.svg?style=flat)](https://github.com/LuD1161/agentjail/releases)

curl -fsSL https://raw.githubusercontent.com/LuD1161/agentjail/main/install.sh | sh

or

brew install LuD1161/tap/agentjail

agentjail blocking a coding agent in real time

A coding agent gets blocked before it fires. ▶ Watch the 36-second demo with sound · source in video/.


Recent updates

Version Date Highlights
v1.7.0 Aug 29, 2026 Claude Code and Codex learn the governed host-access path through an AgentJail-owned instruction block. Exact session-bound runtime grants and configured connector diagnostics establ