robert-mcdermott

Collomia — Security skill for Claude Code

Security community

Collomia is a provider-neutral agentic coding agent for the terminal.

How to install Collomia

This entry records only its repository, not the path inside it, so there is no exact command to give. Open robert-mcdermott/collomia and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Collomia does

Collomia is a provider-neutral agentic coding agent for the terminal. Every model-proposed action passes through layered permissions, command analysis, OS sandboxing, network controls, an audit ledger, and evidence-based completion gates

Alternatives in Security

Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
Claude Code Security Review — An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities 3.9k ★
Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★

README

Collomia

![Collomia terminal interface](docs/collo-screenshot.png)

Collomia is a local-first, provider-neutral agent for the terminal. Its Developer profile combines a polished interactive interface with repository-aware tools and language-server intelligence; its Work profile supports research, analysis, automation, knowledge retrieval, document authoring, external actions, and direct questions in ordinary non-Git folders. Both use the same durable sessions, MCP and skills support, permission boundary, and headless JSONL interface. It ships as one `collo` binary for macOS, Linux, and Windows.

The project is built around an unusually explicit trust boundary. Model-proposed actions pass through layered permissions, command analysis, OS sandboxing, network controls, audit, and evidence-based completion checks. Standard execution is the permanent default. For work that benefits from a visible dependency graph, Orchestrated Goal adds optional evidence-gated durable execution in which the runtime—not model prose—owns readiness, evidence freshness, recovery, budgets, and the terminal outcome.

Why Collomia stands out

Native containment on every major desktop OS. Commands can run under macOS Seatbelt, Linux Landlock, or Windows AppContainer plus Job Objects. Compatibility-first auto mode reports degradation; require fails closed when the requested boundary is unavailable.
Monotonic layered policy. Defaults, user configuration, trusted project configuration, and environment overrides compose predictably. A repository may tighten containment but cannot weaken the user's security posture, and project configuration, instructions, skills, and MCP servers remain quarantined until the workspace is trusted.
Real network boundaries. Every sandbox backend can deny command network access. macOS also supports host-scoped sandbox egress through a Collomia-owned broker; Linux and Windows retain their honest all-or-nothing controls where