{
 "schema_version": 1,
 "generated": "2026-10-25",
 "id": "nvidia-openshell--teach-your-agent-to-write-openshell-policies",
 "repo": "NVIDIA/OpenShell",
 "repo_url": "https://github.com/NVIDIA/OpenShell",
 "repo_slug": "nvidia-openshell",
 "title": "Teach your coding agent to drive OpenShell",
 "page_title": "How to teach your coding agent to drive OpenShell with OpenShell",
 "summary": "Install the official OpenShell skills so your agent can run the CLI, write policies and debug gateways.",
 "who": "A developer who would rather ask Claude Code or Codex to set up sandboxes than learn every policy rule by hand.",
 "problem": "Sandbox policies and gateway routing are new territory, and a wrong rule either blocks the agent or lets too much through.",
 "outcome": "A coding agent that can drive the OpenShell CLI, draft sandbox policies and debug gateways and inference routing for you.",
 "steps": [
  "Run `npx skills add NVIDIA/OpenShell` in your project",
  "Ask your agent to use the OpenShell skills; they work without an OpenShell source checkout",
  "Have it draft a filesystem, network and process policy for your sandbox and review the draft yourself",
  "Use the advisor and prover from the Policies docs to check what a change would allow before you apply it",
  "For apps, add the Python SDK with `uv add openshell` and use the same release for the SDK and the gateway"
 ],
 "agent_prompt": "Install the NVIDIA/OpenShell skills with `npx skills add NVIDIA/OpenShell`, then write a sandbox policy for <project> that allows <files and hosts> and nothing else. Explain each rule, and do not apply it until I approve.",
 "agents": [
  "claude-code",
  "codex",
  "cursor"
 ],
 "difficulty": "Intermediate",
 "time": "20 minutes",
 "basis": "readme",
 "caveat": "An agent-written policy is a draft: the point of OpenShell is that a human reviews new access, so read every rule before you approve it.",
 "category": "Software and DevOps",
 "tags": [
  "Software and DevOps"
 ],
 "lang": "rust",
 "requirements": [
  "Linux, macOS on Apple Silicon, or Windows with WSL 2 (experimental)",
  "Docker, Podman, or host virtualization",
  "An agent to run inside the sandbox; the default image is minimal Ubuntu with no agent installed",
  "For Kubernetes: Helm and a CNI that enforces NetworkPolicy"
 ],
 "risk": "none",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [],
 "best": false,
 "score": 0.8,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/nvidia-openshell/teach-your-agent-to-write-openshell-policies/",
 "md": "https://dedupedai.com/use-cases/nvidia-openshell/teach-your-agent-to-write-openshell-policies/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/nvidia-openshell--teach-your-agent-to-write-openshell-policies.json",
 "api_version": "v1"
}