{
 "schemaVersion": 1,
 "generated": "2026-10-30",
 "dataLicense": "CC BY-SA 4.0",
 "license": "CC BY-SA 4.0",
 "notice": "Data from Open Source Everything (https://opensourceeverything.org), licensed CC BY-SA 4.0: use it freely, credit the site, link to the page, and share changes under the same license. Listings were drafted with AI assistance and are managed by the r/TrueOpenSource moderators; check a project's own page before relying on a fact.",
 "id": "agent-safety",
 "name": "Sandboxes and guardrails for agents",
 "page": "https://opensourceeverything.org/g/agent-safety/",
 "category": "coding-agents",
 "categoryName": "Coding agents & their tools",
 "job": "Keeping agents from doing damage: sandboxes, permission checks and secret masking",
 "closedApps": [],
 "coverage": "partial",
 "alternatives": [
  {
   "id": "e2b",
   "name": "E2B",
   "page": "https://opensourceeverything.org/p/e2b/",
   "summary": "E2B lets developers run code written by AI in isolated, disposable sandboxes in the cloud, so it cannot touch other systems. It is aimed at programmers and teams building AI tools.",
   "kind": "developer_tool",
   "setup": "advanced",
   "setupWhy": "Made for developers: you use it from code or the command line.",
   "platforms": [
    "server"
   ],
   "license": "Apache-2.0",
   "licenseClass": "open",
   "licenseNeedsCheck": false,
   "stars": 14579,
   "forks": null,
   "status": "active",
   "verified": false,
   "latestRelease": null,
   "code": "https://github.com/e2b-dev/E2B",
   "website": "https://e2b.dev",
   "download": null,
   "release": null,
   "family": null,
   "familyChildren": [],
   "howToHelp": null,
   "project": "e2b",
   "rank": 1,
   "fit": "partial",
   "note": "Provides sandboxes only; no permission checks or secret masking described.",
   "why": "Does part of the job · Advanced setup",
   "score": 38.5
  },
  {
   "id": "microsandbox",
   "name": "microsandbox",
   "page": "https://opensourceeverything.org/p/microsandbox/",
   "summary": "Microsandbox runs untrusted programs, such as AI agents, user code and automation tasks, inside small virtual machines on your own computer so they cannot harm the rest of the system. It is aimed at developers who build agents or tools that need to run code safely.",
   "kind": "developer_tool",
   "setup": "advanced",
   "setupWhy": "Made for developers: you use it from code or the command line.",
   "platforms": [
    "windows",
    "mac",
    "linux"
   ],
   "license": "Apache-2.0",
   "licenseClass": "open",
   "licenseNeedsCheck": false,
   "stars": 8834,
   "forks": null,
   "status": "active",
   "verified": false,
   "latestRelease": null,
   "code": "https://github.com/microsandbox/microsandbox",
   "website": null,
   "download": null,
   "release": null,
   "family": null,
   "familyChildren": [],
   "howToHelp": null,
   "project": "microsandbox",
   "rank": 2,
   "fit": "partial",
   "note": "Sandboxing is covered; permission checks and secret masking are not clearly described.",
   "why": "Does part of the job · Advanced setup",
   "score": 35.8
  },
  {
   "id": "container-use",
   "name": "container-use",
   "page": "https://opensourceeverything.org/p/container-use/",
   "summary": "Container Use runs AI coding assistants inside separate containers, so each agent works in its own isolated copy of a project and its changes stay on their own git branch. It is aimed at software developers who use AI coding agents.",
   "kind": "developer_tool",
   "setup": "advanced",
   "setupWhy": "Made for developers: you use it from code or the command line.",
   "platforms": [
    "windows",
    "mac",
    "linux"
   ],
   "license": "Apache-2.0",
   "licenseClass": "open",
   "licenseNeedsCheck": false,
   "stars": 4078,
   "forks": null,
   "status": "active",
   "verified": false,
   "latestRelease": null,
   "code": "https://github.com/dagger/container-use",
   "website": null,
   "download": null,
   "release": null,
   "family": null,
   "familyChildren": [],
   "howToHelp": null,
   "project": "container-use",
   "rank": 3,
   "fit": "partial",
   "note": "Isolates agents in containers and logs commands; no permission checks or secret masking mentioned.",
   "why": "Does part of the job · Advanced setup",
   "score": 32.8
  },
  {
   "id": "sandbox-runtime",
   "name": "sandbox-runtime",
   "page": "https://opensourceeverything.org/p/sandbox-runtime/",
   "summary": "Sandbox Runtime (srt) is a command-line tool that limits which files and websites a program can reach, by applying restrictions built into the operating system. It is for developers who want to run AI agents, local tool servers, or other programs with less access to their computer.",
   "kind": "developer_tool",
   "setup": "advanced",
   "setupWhy": "Made for developers: you use it from code or the command line.",
   "platforms": [
    "windows",
    "mac",
    "linux"
   ],
   "license": "Apache-2.0",
   "licenseClass": "open",
   "licenseNeedsCheck": false,
   "stars": 6764,
   "forks": null,
   "status": "active",
   "verified": false,
   "latestRelease": null,
   "code": "https://github.com/anthropic-experimental/sandbox-runtime",
   "website": null,
   "download": null,
   "release": null,
   "family": null,
   "familyChildren": [],
   "howToHelp": null,
   "project": "sandbox-runtime",
   "rank": 4,
   "fit": "partial",
   "note": "Sandboxing is clear; secret masking is not shown in the README.",
   "why": "Does part of the job · Advanced setup",
   "score": 31.5
  }
 ],
 "source": "https://opensourceeverything.org/g/agent-safety/",
 "group": "Sandboxes and guardrails for agents",
 "replaces": []
}