sandbox-exec

macOS Seatbelt sandbox CLI for developers. Protect credentials (SSH, AWS, GPG) from malicious npm packages, supply chain attacks, and untrusted build scripts. Deny-by-default filesystem isolation. Perfect for Claude Code agentic workflows with --dangerously-skip-permissions.

Fearlessly build arbitrary untrusted Cargo projects

Sandboxes Minecraft on MacOS, protecting from malicious code.

A Python decorator that executes untrusted code in isolated sandboxes with defense-in-depth security, designed for safe execution of LLM-generated code on local machines.

Uses sandboxing feature of MacOS to sandbox tools/scripts

Securely run any command inside a macOS Seatbelt sandbox limited to your current project directory.

Run an agent CLI unattended, on a brief, inside a fence, under a budget, with a ledger.

lightweight OS-level sandbox for securing processes with filesystem and network controls - zero containers, zero fuss

PoC of sandboxing for the Antigravity AI IDE on OSX. PRs welcome to improve the sandboxing

Hardening a local AI coding agent on macOS: giving it its own credentials and taking away access to yours. 9 credential leaks to 0, with the measurements and the mistakes kept in.

Multi-tenant sandboxed execution for untrusted code: layered OS isolation, probed resource ceilings, durable job lifecycle with a crash reaper, and an adversarial escape-attempt suite.

🏖️ Run Ralph (Claude, Codex, opencode, Cursor) on macOS using sandbox-exec instead of Docker.

macOS backend for dsh-witness/dsh-anchor: uchg + sandbox-exec sandbox recipes. Every claim carries an experiment number.

Local (stdio) MCP server in Go that gives opencode and other model hosts a safe, isolated sandbox for running arbitrary commands — a secure drop-in replacement for the host shell. Deny-by-default, ephemeral per-session containers with Docker, or macOS seatbelt sandbox-exec with no daemon. Streaming output.