GitHub Outside Sandbox
SkillDev toolsLets your agent run Git and GitHub CLI commands directly when sandbox restrictions block authentication or repo writes.
Use GitHub Outside Sandbox in Claude, ChatGPT or Ahel Desktop
Free. Sign in, add GitHub Outside Sandbox and connect your AI. About a minute.
Also: Claude Code · Cursor · Codex
Then ask your AI: use the GitHub Outside Sandbox skill
Details
Instructions available. Your AI can read the instructions. Execution depends on the setup they require.
Account requirements not reviewed. Check the skill instructions before use; Ahel provides instructions and does not run this skill.
No other account needed.
Add Ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.
About this skill
Run Git and GitHub CLI commands on the host when sandboxing blocks Keychain auth, network access, or .git writes. Use for gh auth, repo/PR operations, index.lock, or permission errors; covers execution context only.
What this skill tells your AI
The instructions your AI receives, as published by davidondrej/skills in skills/ops-and-setup/github-outside-sandbox/SKILL.md and read by Ahel’s review.
- Start normally. Escalate only the blocked command and only within the user's authorization.
- If sandboxed
gh auth statusfails, rerun it outside the sandbox before claiming authentication is broken. Never expose or copy tokens. - Run GitHub CLI network operations outside the sandbox when required:
gh repo ...,gh pr ..., and relatedghcommands. - Run Git writes outside the sandbox when
.gitis outside writable roots or errors mentionindex.lockorOperation not permitted:git add,git commit, andgit push. - Use the harness's official host-execution mechanism. In Codex, set
sandbox_permissions: "require_escalated", give a concretejustification, and use only a narrow safeprefix_rulewhen appropriate. - Never use shell wrappers, credential copying, or broad approval prefixes to bypass the sandbox.
- Verify from the host context with
git status -sb,git remote -v, and the relevantgh ... viewcommand. Ask the user to authenticate only if the host-context check also fails.
Signals
- GitHub stars
- 4k
- Forks
- 598
- Last commit
- Sep 2026
Ahel review
S4info
community integration, published by davidondrej, not github
Automated review, not a security audit. Ruleset v1+k2.
Advanced
- Item type
- skill
- Key
github-outside-sandbox- Source
- github.com/davidondrej/skills