{"id":27015252,"url":"https://github.com/hacrvlq/skeld","last_synced_at":"2025-08-08T02:36:03.601Z","repository":{"id":248287944,"uuid":"828305791","full_name":"hacrvlq/skeld","owner":"hacrvlq","description":" a tui tool for opening projects in a restricted sandbox to prevent supply chain attacks such as typosquatting","archived":false,"fork":false,"pushed_at":"2025-04-10T13:31:10.000Z","size":276,"stargazers_count":3,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-07-19T12:16:01.205Z","etag":null,"topics":["malicious-packages","project-launcher","sandbox","sandboxing","security","security-tools","software-supply-chain-security","supply-chain-security","tui","typosquatting"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hacrvlq.png","metadata":{"files":{"readme":"docs/README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-07-13T18:16:49.000Z","updated_at":"2025-04-10T13:27:09.000Z","dependencies_parsed_at":"2024-10-20T17:05:43.694Z","dependency_job_id":"037a034b-ffe8-4f9c-a547-d3e029747bb0","html_url":"https://github.com/hacrvlq/skeld","commit_stats":null,"previous_names":["hacrvlq/skeld"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/hacrvlq/skeld","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hacrvlq%2Fskeld","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hacrvlq%2Fskeld/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hacrvlq%2Fskeld/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hacrvlq%2Fskeld/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hacrvlq","download_url":"https://codeload.github.com/hacrvlq/skeld/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hacrvlq%2Fskeld/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":269354730,"owners_count":24403313,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-08T02:00:09.200Z","response_time":72,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["malicious-packages","project-launcher","sandbox","sandboxing","security","security-tools","software-supply-chain-security","supply-chain-security","tui","typosquatting"],"created_at":"2025-04-04T14:17:32.002Z","updated_at":"2025-08-08T02:36:03.593Z","avatar_url":"https://github.com/hacrvlq.png","language":"Rust","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Skeld\n\n\u003e Programming is constant remote code execution.[^1]\n\nOr have you inspected all your dependencies? It's easy to write a\nlibrary that steals private ssh keys on the side.\n\nSkeld mitigates this risk by opening projects in a **restricted sandbox**\nwhere only the required paths are accessible.\nA sandbox can be conveniently created via a **terminal UI** by selecting a\nproject, which is then opened in the configured editor/IDE (inside a sandbox).\n\n![screenshot of the skeld tui](screenshot.png)\n\nThe paths that the sandbox can access are defined on a per-project basis:\n```toml\n# projects are specified with a single TOML file\n\n[project]\nproject-dir = \"~/dev/skeld\"\n# paths can be whitelisted read-only\nwhitelist-ro = [\n  # some string interpolation is supported\n  # (see `man 'skeld(7)'`, section \"String Interpolation\")\n  \"$(CONFIG)/nvim\",\n]\n# paths can be whitelisted read-write\nwhitelist-rw = [\n  \"$(DATA)/nvim\",\n  \"$(STATE)/nvim\",\n]\n# including options from other files is also supported\ninclude = [\"rust\"]\n```\n\n## Installation\nNote that only Linux is supported.\n\n\u003e [!IMPORTANT]\n\u003e Skeld depends on [Bubblewrap](https://github.com/containers/bubblewrap), so it must be available in `PATH`.\n\n- Pre-built binaries: **[Releases](https://github.com/hacrvlq/skeld/releases)**\n- Using [Cargo](https://www.rust-lang.org/tools/install): `cargo install skeld`\n\n## Getting Started\nWithout any configuration, the skeld UI displays a blank screen. Some\nconfiguration is therefore inevitable. Below is an example configuration for\nthe [neovim](https://neovim.io) editor.\n### Configuration\nCreate a file `$XDG_CONFIG_HOME/skeld/config.toml` with the following content:\n```toml\n# it is possible to disable the help text in the bottom right corner\ndisable-help = false\n\n# colorscheme from the screenshot\n[colorscheme]\nnormal = \"#DCD7BA\"\nbanner = \"#E6C384\"\nheading = \"#C0A36E\"\nlabel = \"#727169\"\nkeybind = \"#6A9589\"\nbackground = \"#1F1F28\"\n\n[[commands]]\nname = \"\u003cedit\u003e\"\nkeybind = \"e\"\ncommand = [\"nvim\"]\n# whether to detach from terminal;\n# should be true for GUI commands and false for TUI commands\ndetach = false\n\n[[commands]]\nname = \"\u003cquit\u003e\"\nkeybind = \"q\"\n# if 'command' is empty, skeld quits immediately\ncommand = []\n\n# user-wide whitelists\n[project]\n# read-write whitelists\nwhitelist-rw = [\n  \"$(DATA)/nvim\",\n  \"$(STATE)/nvim\",\n]\n# read-only whitelists\nwhitelist-ro = [\n  \"~/.bashrc\",\n  \"$(CONFIG)/nvim\",\n\n  \"/usr\",\n  \"/etc\",\n]\n# symlink whitelists\n# NOTE: depending on the system, these may not be symlinks;\n#       so they may need to be in 'whitelist-ro'\nwhitelist-ln = [\n  \"/bin\",\n  \"/lib\",\n  \"/lib64\",\n]\nadd-tmpfs = [\n  \"/tmp\",\n]\n# as long as no secrets are stored in environment variables,\n# this should be fine\nwhitelist-all-envvars = true\n\n# configure the editor/IDE used to open projects\n[project.editor]\n# command used when a project specifies a file to be opened initially\ncmd-with-file = [\"nvim\", \"$(FILE)\"]\n# command used when no initial file is specified\ncmd-without-file = [\"nvim\", \".\"]\n# whether to detach editor from terminal;\n# should be true for GUI editors and false for TUI editors\ndetach = false\n```\nRefer to `man 'skeld(7)'` for all supported options.\n\n### Projects\nTo add a project, create a file at\n`$XDG_DATA_HOME/skeld/projects/\u003cyour_project_name\u003e.toml`\nwith the following content:\n```toml\n[project]\nproject-dir = \"\u003cyour_project_directory\u003e\"\n# optionally, a file to be opened initially can be specified\ninitial-file = \"src/main.rs\"\n\n# project-specific whitelists\nwhitelist-dev = [\n  \"/dev/dri/\",\n]\n# Language-specific whitelists can be separated into different a file.\n# To do so, create a file at $XDG_DATA_HOME/skeld/include/\u003cyour_lang\u003e.toml\n# with the language-specific whitelists.\ninclude = [\"\u003cyour_lang\u003e\"]\n```\nRefer to `man 'skeld(7)'` for all supported options.\n\n## Documentation\nThe documentation is available at `man 'skeld(7)'`\n\n## Building\nRequires the [Rust Compiler](https://www.rust-lang.org/tools/install).\n```sh\ncargo build --release\n./target/release/skeld\n```\nTo build the man page, [scdoc](https://git.sr.ht/~sircmpwn/scdoc) is required.\n```sh\nscdoc \u003c docs/skeld.7.scd \u003e skeld.7\n```\n\n[^1]: This might be slightly overdramatized.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhacrvlq%2Fskeld","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhacrvlq%2Fskeld","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhacrvlq%2Fskeld/lists"}