macOS Seatbelt Sandboxer

Generate minimal, allowlist-based macOS Seatbelt sandbox profiles to isolate and restrict applications. Locks a process down to only the files, network, and syscalls it actually needs.

Running untrusted or risky binaries on macOS is safer inside a Seatbelt sandbox. This skill generates tight, allowlist-based sandbox profiles — granting only the file paths, network access, and operations a process genuinely requires — to contain the blast radius if it's compromised.

When to use

Use when sandboxing, isolating, or restricting macOS applications and build steps with least-privilege allowlist profiles.

Examples

Sandbox a binary

Generate a least-privilege profile

Generate a macOS Seatbelt profile that lets this tool read only ./input and write only ./output, no network

Harden a build step

Restrict a risky command

Create a Seatbelt sandbox profile to run this untrusted build script with minimal access