SmolVM - one-command sandbox for Claude Code and Codex
Pre-installed sandboxed VM with Claude and Codex ready to run, plus git credentials wired up. Removes the 'press enter to accept' loop without exposing the host.
All entriesGitHubTool GitHubTool GitHubLibraryFeatured GitHubToolFeatured GitHubTool GitHubTool GitHubTool GitHubTool GitHubTool
Tag
#sandbox
9 entries tagged with #sandbox.
smolvm - portable lightweight VMs in a single file
Open-source CLI for sub-second VMs on macOS (Hypervisor.framework) and Linux (KVM) via libkrun. Sandboxes untrusted code with hardware isolation and packs stateful environments into a single .smolmachine file.
AgentBox - SDK to run coding agents in any sandbox
One SDK to run Claude Code, Codex, or OpenCode inside Docker, E2B, Modal, Daytona, or Vercel sandboxes - boots each agent's native server (JSON-RPC, HTTP/SSE) instead of using non-interactive --print mode.
CubeSandbox - sub-60ms self-hosted E2B alternative
Open-source sandbox runtime for LLM-generated code built on RustVMM and KVM. Targets sub-60ms cold starts with full kernel isolation, designed as a self-hostable replacement for closed E2B-style services.
Agentjail - self-hosted Linux sandbox for AI code
Minimal Linux sandbox for running untrusted code, designed for AI agents and build systems. Self-hosted alternative to Freestyle.sh-style code execution services.
stereOS - hardened Linux for AI agents
Nix-based Linux distribution purpose-built for running AI agents. Hardened defaults and an immutable base aimed at sandboxing autonomous coding agents.
Open Cowork - desktop app for AI coding agents
Open-source Windows/macOS desktop that one-click installs Claude Code, MCP tools, and Skills with sandbox isolation, multi-model support, and Slack/Feishu hooks.
Agent Governance Toolkit
Microsoft's policy engine for autonomous agents: zero-trust identity, execution sandboxing, and reliability checks. Maps to all 10 OWASP Agentic Top 10 categories.
Zerobox - process sandboxing on the Codex runtime
Lightweight, cross-platform process sandbox in Rust. Wraps any command with file, network, and credential controls - built on OpenAI Codex's runtime primitives.