# Nsjail

> Use when configuring Linux sandboxing with nsjail, generating security profiles, or configuring process isolation for skills.

- Skill: `tomevault-io/nsjail` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/nsjail`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/nsjail/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/nsjail

---


# Nsjail Skill

Linux sandboxing and process isolation using nsjail.

## Commands

| Command | Description |
|---------|-------------|
| [`nsjail_config`](#nsjail_config) | Generate nsjail configuration |
| [`nsjail_profile`](#nsjail_profile) | Generate nsjail profile |
| [`nsjail_run`](#nsjail_run) | Run command in nsjail |

## Usage Examples

```python
# Generate minimal nsjail config
@omni("nsjail.nsjail_config", {"skill_id": "data-processor", "mode": "local"})

# Generate standard profile
@omni("nsjail.nsjail_profile", {"profile_type": "standard", "skill_id": "web-scraper"})

# Run command in nsjail
@omni("nsjail.nsjail_run", {"cmd": ["python3", "script.py"], "mode": "local"})
```

## Concepts

| Topic | Description | Reference |
|-------|-------------|-----------|
| Profile Types | Sandbox profiles | [profiles.md](references/profiles.md) |
| Resource Limits | CPU/memory limits | [rlimits.md](references/rlimits.md) |
| Network Policies | Network isolation | [network.md](references/network.md) |

## Best Practices

- Start with minimal profile, escalate as needed
- Use network deny unless required
- Set appropriate timeouts
- Use cgroups for resource control

## Related Skills

| Topic | Description | Reference |
|-------|-------------|-----------|
| Seatbelt | macOS sandboxing | [seatbelt](../seatbelt/SKILL.md) |
| NCL Modules | Nickel module patterns | [nickel-modules.md](packages/ncl/nickel-modules.md) |

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/tao3k) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-15 -->