#sandbox (30 Repositories)
Ranked open-source repositories tagged with #sandbox, scored by pull request acceptance likelihood and maintainer engagement velocity.
70.6%
22.5h
30 repositories tagged #sandbox
h5i-dev/h5i
An agent-native web security workspace. Find vulnerabilities through red-teaming. Formally verify properties of Rust codes in Lean 4.
vm0-ai/vm0
Okou connects to the tools your team already uses and does the work — across marketing, sales, engineering, and operations, under your control.
buildkite/cleanroom
Policy-controlled microVM sandboxes for safe, reproducible repo workloads.
jayminwest/warren
Run coding agents like infrastructure, not terminal sessions. Warren manages isolation, lifecycle, spend, recovery, and Git delivery on compute you control.
mensfeld/code-on-incus
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
bytecodealliance/wasmtime
A lightweight WebAssembly runtime that is fast, secure, and standards-compliant
boxlite-ai/boxlite
The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud.
Revolutionary-Games/Thrive
The main repository for the development of the evolution game Thrive.
TencentCloud/CubeSandbox
Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
okou-ai/okou
Okou connects to the tools your team already uses and does the work — across marketing, sales, engineering, and operations, under your control.
aws-samples/sample-autonomous-cloud-coding-agents
Autonomous background coding agents on AWS. Turn tasks into pull requests via isolated runtimes, with built-in orchestration, observability, and governance.
opensandbox-group/OpenSandbox
Secure, Fast, and Extensible Sandbox runtime for AI agents.
arcboxlabs/arcbox
Run AI agents on real and isolated machines — own kernel, filesystem, and network — with <100ms boot. Local first, OCI compatible, pure Rust.
vm0-ai/okou
Okou connects to the tools your team already uses and does the work — across marketing, sales, engineering, and operations, under your control.
hartwork/sandwine
:wine_glass: Command-line tool to run Windows apps with Wine and bwrap/bubblewrap isolation on Linux
kubernetes-sigs/agent-sandbox
agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes and reinforcement learning (RL).
sandbaseai/sandbase-harness
Local-first, self-hosted AI agent runtime and MCP bridge with sandboxed sessions, memory, credentials, audit/replay, and a local Console.
NevaMind-AI/memU
Personal memory across agents
superradcompany/microsandbox
🧱 easy, fast, programmable and local-first microVM runtime and library
CelestoAI/SmolVM
Open-source AI sandbox infrastructure with unified API for VMMs -- Firecracker, QEMU and libkrun.
tensorlakeai/tensorlake
Tensorlake is a serverless runtime for sandboxes and deploying background agentic applications
OpenTTD/OpenTTD
OpenTTD is an open source simulation game based upon Transport Tycoon Deluxe
madarco/agentbox
Run multiple agents in parallel sandboxed VMs, with a single command, on your PC or in the cloud
pydantic/monty
A secure Python sandbox, written in Rust, for code written by AI.
vercel/eve
The Open Framework for Building Agents
astrid-runtime/astrid
Astrid is a portable, capability-secure operating system for composable software.
webcoyote/sandvault
Run AI agents isolated in a macOS user account and sandbox-exec. Configured to run Claude Code, OpenAI Codex, Cursor Agent, Google Gemini.
navikt/cplt
Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository.
rivet-dev/agentos
Give agents an operating system as a library. Runs in your existing backend – no sandboxes, VMs, or SaaS. Powered by WebAssembly & V8 isolates.
cuga-project/cuga-agent
CUGA is an open-source generalist agent harness for the enterprise, supporting complex task execution on web and APIs, OpenAPI/MCP integrations, composable architecture, reasoning modes, and policy-aware features.