
from gh-aw-firewall93
Run commands and agent workflows with application-layer domain whitelisting and container-level network isolation (AWF) for safer automated runs.
AWF (Agentic Workflow Firewall) provides an easy CLI for running commands and agent workloads inside a controlled network environment. It enforces L7 domain allowlists, optional SSL-bump inspection, host-level enforcement (iptables/Docker), and modes for chroot/host-binary access while preventing unwanted external egress.
Use AWF when you need to run untrusted or networked agent tasks safely, test code that makes external requests with strict allowlists, or integrate firewalled steps into CI (GitHub Actions, local tests). It's valuable for security-conscious automation, Playwright/localhost testing with limited egress, and running Copilot/agent CLIs in a sandbox.
Ideal for infra and CI-focused agents (Copilot CLI, GitHub Actions runners, Claude Code) and any automation that needs controlled network access. Requires sudo/docker privileges for full functionality.
This skill has not been reviewed by our automated audit pipeline yet.