# Openshell Policy Advisor

Use when an OpenShell sandbox returns policy_denied, mentions policy.local, or needs a...

- Repository: https://github.com/NVIDIA/OpenShell (20903 stars)
- Category: Engineering
- License: Apache-2.0
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add NVIDIA/OpenShell --skill openshell-policy-advisor -g -a claude-code -y`
Codex: `npx skills add NVIDIA/OpenShell --skill openshell-policy-advisor -g -a codex -y`
Cursor: `npx skills add NVIDIA/OpenShell --skill openshell-policy-advisor -g -a cursor -y`
Gemini CLI: `npx skills add NVIDIA/OpenShell --skill openshell-policy-advisor -g -a gemini-cli -y`

## Description

Use when an OpenShell sandbox returns policy_denied, mentions policy.local, or needs a narrow network policy proposal.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# OpenShell Policy Advisor

When a request fails with `policy_denied`, do not treat the denial as final if the user task still needs the request. Read `/etc/openshell/skills/policy_advisor.md`, inspect `http://policy.local/v1/policy/current`, submit the narrowest proposal to `http://policy.local/v1/proposals`, wait on `/v1/proposals/{chunk_id}/wait?timeout=300`, and retry only after approval with `policy_reloaded: true`.