Skills when-setting-network-security-use-network-security-setup

📦

when-setting-network-security-use-network-security-setup

Name: when-setting-network-security-use-network-security-setup
Author: DNYoussef

Content revision r1 High Risk ⚙️ External commands🌐 Network access

Configure Network Security for Claude Code

AI coding sandboxes need clear network boundaries to reduce accidental exposure. This skill provides a structured workflow for trusted domains, access rules, validation, and documentation.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "when-setting-network-security-use-network-security-setup" from https://skillstore.io/skills/dnyoussef-when-setting-network-security-use-network-security-setup.md and its manifest at https://skillstore.io/api/skills/dnyoussef-when-setting-network-security-use-network-security-setup/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/dnyoussef-when-setting-network-security-use-network-security-setup.md Signed manifest GET /api/skills/dnyoussef-when-setting-network-security-use-network-security-setup/manifest Signed lockfile GET /api/skills/dnyoussef-when-setting-network-security-use-network-security-setup/lockfile

Test it

Using "when-setting-network-security-use-network-security-setup". I need network access rules for a Claude Code sandbox that uses GitHub and package registries.

Expected outcome:

A requirements summary with trusted domains, allowed outbound ports, blocked protocols, rate limits, and documentation tasks.

Using "when-setting-network-security-use-network-security-setup". Review this network isolation plan before I run it.

Expected outcome:

A security review that calls out privileged firewall changes, proxy side effects, rollback needs, and safer validation targets.

Using "when-setting-network-security-use-network-security-setup". Create a maintenance checklist for sandbox network controls.

Expected outcome:

A concise checklist covering monthly domain review, weekly log audit, policy tests, and documentation updates.

Security Audit

High Risk

v8 • 7/5/2026 Open versioned report

Most static external-command detections are false positives caused by Markdown fences or inline code formatting. The real risks are the generated shell scripts, privileged host network changes, proxy environment modification, and a live blocked-domain test that may contact an untrusted domain if controls fail.

Files scanned

334

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

SKILL.md:134-166

Privileged Host Network Configuration

The skill instructs users to generate a shell script that sets iptables default policies, edits /etc/hosts, and writes /etc/environment.d/network-security.conf. Running the script can disrupt network access or persist unintended egress settings on the host.

The cited script contains explicit iptables commands and writes to system configuration paths. These privileged changes are central to the skill workflow, not incidental text.

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:136

Unix shell invocation

#!/bin/bash

The shebang begins a generated shell script that changes iptables policies, writes /etc/hosts, and writes system environment configuration. Running it can disrupt host network access and persist security-sensitive changes.

Medium

SKILL.md:175

Unix shell invocation

#!/bin/bash

The shebang begins a generated test script that performs curl and nc network probes. The behavior is intentional, but still executes external network checks from the user environment.

Medium

SKILL.md:183

Hardcoded URL

! curl -s --max-time 5 https://malicious.com && echo "✓ Blocked domain inaccessible"

The test command attempts a live curl request to malicious.com and relies on failure for success. If blocking is misconfigured, the skill sends traffic to an untrusted hardcoded domain.

Medium

SKILL.md:158

Proxy environment variable

HTTPS_PROXY=""

The generated environment configuration sets HTTPS_PROXY to an empty value. In managed environments this can bypass required proxy inspection or break expected egress controls.

Risk Factors

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/dnyoussef-when-setting-network-security-use-network-security-setup/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/dnyoussef-when-setting-network-security-use-network-security-setup/security.svg)](https://skillstore.io/skills/dnyoussef-when-setting-network-security-use-network-security-setup?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/dnyoussef-when-setting-network-security-use-network-security-setup?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dnyoussef-when-setting-network-security-use-network-security-setup/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/dnyoussef-when-setting-network-security-use-network-security-setup.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

DNYoussef. (2026). when-setting-network-security-use-network-security-setup security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dnyoussef-when-setting-network-security-use-network-security-setup/audits/8

BibTeX citation

@techreport{dnyoussef-dnyoussef-when-setting-network-security-use-network-security-setup-2026,
  author = {DNYoussef},
  title = {when-setting-network-security-use-network-security-setup security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/dnyoussef-when-setting-network-security-use-network-security-setup/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "when-setting-network-security-use-network-security-setup security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "DNYoussef"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/dnyoussef-when-setting-network-security-use-network-security-setup/audits/8"
identifiers:
  - type: other
    value: "skillstore:dnyoussef-when-setting-network-security-use-network-security-setup:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prepare a Claude Code Sandbox Policy

Define allowed domains, blocked protocols, ports, and documentation before enabling network access for a development sandbox.

Review CI Network Egress Controls

Map build dependencies to an allowlist and create repeatable tests for expected outbound access.

Document Team Network Rules

Create clear network requirements, deployment notes, and maintenance checks for engineering teams using AI coding tools.

Try These Prompts

List Network Requirements

Use this skill to list the external domains, ports, protocols, and rate limits needed for my Claude Code sandbox.

Create an Allowlist Policy

Use this skill to draft a whitelist network policy for a project that needs GitHub, package registries, and one internal API.

Plan Safe Validation Steps

Use this skill to design network access tests that avoid contacting untrusted domains and preserve existing proxy settings.

Audit a Proposed Configuration

Use this skill to review my planned firewall, DNS, proxy, and documentation changes before I apply them in a sandbox.

Best Practices

Review every domain, port, and protocol against an approved business requirement before applying rules.
Test firewall, DNS, and proxy changes in a disposable sandbox before using shared infrastructure.
Keep rollback steps and audit notes with every network policy change.

Avoid

Running generated firewall scripts on a workstation or shared server without review.
Using public suspicious domains as live test targets for blocked access checks.
Clearing proxy environment variables without confirming organizational egress requirements.

Frequently Asked Questions

Does this skill configure my network automatically?

No. It provides a guided SOP and example commands that an operator must review before use.

Can I use it with Claude, Codex, and Claude Code?

Yes. The marketplace metadata marks support for Claude, Codex, and Claude Code workflows.

Does it require administrator privileges?

Some example firewall and system file changes usually require elevated privileges. Test them only in approved environments.

Are the trusted domains complete for every project?

No. The listed domains are examples and must be adjusted for each project dependency.

How should blocked-domain testing be handled?

Use a controlled test host, reserved domain, or local mock instead of a public suspicious domain.

What should I check before publishing a policy?

Confirm business need, proxy behavior, rollback steps, logs, and repeatable validation for each rule.

Developer Details

Author

DNYoussef

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/DNYoussef/ai-chrome-extension/tree/main/.claude/skills/specialized-tools/when-setting-network-security-use-network-security-setup

Ref

c579efd02184f1128d6741d16e6c8d951d7d4208

Maintenance freshness

7/18/2026

Usage

5 downloads · 246 views

File structure

📄 process-diagram.gv

📄 PROCESS.md

📄 README.md

📄 SKILL.md