# Execution Isolation

> Permission-based access control for AI tool calls Use when this capability is needed.

- Skill: `tomevault-io/execution-isolation` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/execution-isolation`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/execution-isolation/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/execution-isolation

---


# Execution Isolation

Enforces filesystem, network, and command policies on all AI tool calls.

## Configuration

Add to `~/.openclaw/openclaw.json`:

```json
{
  "plugins": {
    "execution-isolation": {
      "enforcement": "block",
      "defaultAction": "allow",
      "filesystem": {
        "readAllow": ["~/workspace", "/tmp", "~/.openclaw"],
        "writeAllow": ["~/workspace", "/tmp"],
        "deny": ["~/.ssh", "~/.aws", "~/.gnupg"]
      },
      "network": {
        "allow": ["api.openai.com", "api.anthropic.com", "*.github.com"],
        "deny": ["10.*", "192.168.*", "169.254.*"]
      },
      "commands": {
        "allow": ["node", "python", "git", "pnpm", "npm", "curl"],
        "deny": ["sudo", "chmod", "chown"]
      }
    }
  }
}
```

## Policy Precedence

1. Deny rules always take precedence over allow rules
2. Tool-specific overrides take precedence over global policy
3. If no rules match, `defaultAction` determines the outcome

---
> Source: [Yapie0/safe-openclaw](https://github.com/Yapie0/safe-openclaw) — distributed by [TomeVault](https://tomevault.io).
<!-- tomevault:4.0:skill_md:2026-06-23 -->