Global

DroidDeck brings the SteamOS experience to Android: Valve's Steam client in Big Picture on your Adreno handheld, with Windows games through Valve's ARM64 Proton.

Sandboxed Platform for Agentic Code Execution: pluggable-runtime sandboxes for running agent and user code in isolation.

0 is a production-ready, easy-to-use agent framework with essential abstractions that keep up with rising model capability.

OSS Scanner is a service by Anthropic to scan critical open-source repositories for security vulnerabilities. com/oss-scanner.

Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents — swap harnesses without rewriting, enforce policies and sandboxing, and collaborate in real time from any device.

Monty avoids the latency, complexity and cost of a container based sandbox for running LLM generated code. 14 sandbox you install as a package, and Full Monty, the commercial server that runs the same sandbox behind a WebSocket as a service.

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

A fast, resilient, multi-source file retriever and download engine

Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. It supports both single-node deployment and easy scaling to multi-node clusters.

系统的“转发到其他应用”列表只展示带有 Share Extension 的 App。微信流补齐这层入口，让一次转发直接抵达 Codex、Claude、豆包、千问办公、WorkBuddy、WeSight、Obsidian、剪贴板或你指定的其他应用。

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust.

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

An embeddable, portable, branchable virtual machine to safely run Agents locally.

A self-hostable, extensible AI agent platform: sandboxed tool execution, multi-tenant governance (JWT/quotas/rate limits/audit), a canonical trajectory log, an eval harness with scoring and A/B, an RL data flywheel (rollout→reward→SFT/RLVR JSONL), and protocol-level tool…

Waydroid uses Linux namespaces (user, pid, uts, net, mount, ipc) to run a full Android system in a container and provide Android applications on any GNU/Linux-based platform.

Archive manager and 7zip replacement for macOS. Preview (nested) archives without extracting them. Extract single files.

coop is a Rust CLI that manages disposable virtual machines where Claude Code and Codex have full tool access: Docker, git, compilers, package managers, all without risk to your host machine. Each VM is isolated, reproducible, and cheap to create and destroy.

Daytona is a Secure and Elastic Infrastructure for Running AI-Generated Code

Per-package commands run via pnpm --filter — e.g. pnpm --filter just-bash test:wasm.

A pure-Go JavaScript runtime built for running many small plugin sandboxes fast.

Native, non-invasive parallel multi-account & sandbox manager for Google Antigravity

NVX is an ultra-light micro-VM sandbox for running untrusted workloads with hardware-enforced isolation. It is built on top of OpenVMM and runs Linux as a guest.

Quicksand is an async Python API to launch, control, and snapshot QEMU virtual machines with a particular focus on sandboxing AI agents. Quicksand provides pre-built Linux VMs for Ubuntu and Alpine distros and supports x8664 and ARM64 across macOS, Linux, and Windows.

Brig: run coding agents in a microVM sandbox - the Go cli (brig) and session daemon (brigd)

Jinja is a fast, expressive, extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. Then the template is passed data to render the final document.

Filesystem tools for agents. Read, write, replace, grep, list, create, delete, move via VFS airlock. Part of Unicity AOS.

In the OS model, this is the standard library for user-space processes. It gives capsule authors safe, typed access to every kernel service: filesystem, IPC, networking, storage, approval, scheduling, and more. Capsule authors depend on astrid-sdk and serde.

Run multiple agents in parallel sandboxed VMs, with a single command, on your PC or in the cloud

SDK for building apps & an app store for your Kobo eInk reader

tinyagent provides a command-line interface and an in-process Python SDK, with support for DeepSeek and custom OpenAI-compatible providers, persistent sessions, workspace tools, layered memory, MCP servers, and progressively loaded skills.