Topics / #sandbox

Sandbox projects on GitHub

Isolated execution environments for untrusted code

As of , the most-starred Sandbox projects on GitHub are uv (90.8K stars), deer-flow (84K stars) and daytona (71.5K stars). GitHub.Locker tracks 172 Sandbox repositories with 1.8M stars combined. The fastest-growing on October 16 was SPACE, with +529 stars in a day.

172Projects
1.8MStars in total
+3.7KStars in a day
Browse in the catalog →github.com/topics/sandbox ↗

Hot right now

Most stars gained in a day · Oct 16

+529

SPACE

perplexityai/SPACE · ★ 1.1K

SPACE (Sandboxed Platform for Agentic Code Execution) is a sandbox platform that runs agent and user code inside isolated Firecracker microVMs, controlled through an HTTP API.

+432

context-mode

mksglu/context-mode · ★ 30.3K

Context Mode is an MCP server plus hooks that keeps bulky tool output out of your AI coding agent's context window (98% reduction), persists session memory, and enforces tool routing across 17 platforms.

+375

security-audit-skill

cloudflare/security-audit-skill · ★ 30.4K

A Cloudflare coding-agent skill that turns your agent into a security auditor: it orchestrates isolated agents through a structured, multi-phase audit and returns independently verified, machine-readable findings.

+214

strix

usestrix/strix · ★ 69.1K

Strix is an open-source tool that uses autonomous AI agents to pentest your application like real hackers: it runs your code dynamically, finds vulnerabilities, and proves them with working exploits instead of just flagging suspicious patterns.

The all-time top

Top 100 of 172 · by stars

  1. #1 · astral-sh/uv

    uv

    uv is an extremely fast Python package and project manager, written in Rust. It aims to replace pip, pip-tools, pipx, poetry, pyenv, twine, and virtualenv with a single tool.

    90.8K
  2. #2 · bytedance/deer-flow

    deer-flow

    DeerFlow is an open-source long-horizon super-agent harness from ByteDance that researches, codes, and creates by orchestrating sub-agents, memory, sandboxes and extensible skills, handling tasks that can take minutes to hours.

    84K
  3. #3 · daytonaio/daytona

    daytona

    Daytona is a secure, elastic infrastructure runtime for running AI-generated code inside isolated sandboxes, used by agents and developers through SDKs, an API, and a CLI.

    71.5K
  1. 4

    strix

    69.1Kusestrix/strix · Python

    Strix is an open-source tool that uses autonomous AI agents to pentest your application like real hackers: it runs your code dynamically, finds vulnerabilities, and proves them with working exploits instead of just flagging suspicious patterns.

  2. 5

    openinterpreter

    68.6Kopeninterpreter/openinterpreter · Rust

    Open Interpreter is a Rust-based coding agent forked from OpenAI's Codex, built to get the best performance out of low-cost open models like Kimi K3, DeepSeek, GLM, and Qwen.

  3. 6

    ladybird

    66.5KLadybirdBrowser/ladybird · C++

    Ladybird is a truly independent web browser built on its own novel engine designed around web standards.

  4. 7

    LibreChat

    45.8KLibreChat-AI/LibreChat · TypeScript

    LibreChat is a self-hosted AI chat platform that unifies all major AI providers (OpenAI, Anthropic, Google, AWS Bedrock, Azure, Mistral, OpenRouter and more) in a single ChatGPT-like interface, with Agents, MCP support, Code Interpreter and Artifacts built in.

  5. 8

    firecracker

    37.4Kfirecracker-microvm/firecracker · Rust

    Firecracker is an open-source virtualization technology for creating and managing secure, multi-tenant microVMs for container and function-based serverless workloads.

  6. 9

    QwenPaw

    35.8Kagentscope-ai/QwenPaw · TypeScript

    QwenPaw is a personal AI assistant that you deploy yourself (locally or in the cloud), which remembers context across sessions, runs tasks/automations, and reaches you through chat apps like Discord, Telegram, and WeChat. It is extensible with Skills, Plugins, and MCP tools.

  7. 10

    WeKnora

    34.4KTencent/WeKnora · Go

    WeKnora is an open-source, self-hosted knowledge platform that turns raw documents into a queryable RAG knowledge base, an autonomous ReAct agent, and a self-maintaining Wiki with an interactive knowledge graph.

  8. 11

    learnGitBranching

    34.1Kpcottle/learnGitBranching · JavaScript

    LearnGitBranching is an interactive git visualizer and tutorial that lets you practice git commands and watch a commit tree update live, helping you learn version control through levels and challenges instead of just reading docs.

  9. 12

    nanoclaw

    31Knanocoai/nanoclaw · TypeScript

    A self-hosted AI assistant that runs Claude-powered agents in their own Docker containers and connects them to chat apps — WhatsApp, Telegram, Slack, Discord and more. Each agent has its own memory, workspace and scheduled jobs; you just message it.

  10. 13

    composio

    30.6KComposioHQ/composio · TypeScript

    Composio is a platform for AI agents: it gives your agents 1000+ pre-authenticated toolkits, per-user sessions, auth, triggers, and a sandbox, so they can take action across apps instead of just chatting.

  11. 14

    security-audit-skill

    30.4Kcloudflare/security-audit-skill · JavaScript

    A Cloudflare coding-agent skill that turns your agent into a security auditor: it orchestrates isolated agents through a structured, multi-phase audit and returns independently verified, machine-readable findings.

  12. 15

    context-mode

    30.3Kmksglu/context-mode · TypeScript

    Context Mode is an MCP server plus hooks that keeps bulky tool output out of your AI coding agent's context window (98% reduction), persists session memory, and enforces tool routing across 17 platforms.

  13. 16

    openai-agents-python

    30.1Kopenai/openai-agents-python · Python

    It is the OpenAI Agents SDK: a lightweight yet powerful Python framework for building multi-agent workflows, where an agent is an LLM configured with instructions, tools, guardrails and handoffs.

  14. 17

    smolagents

    29.9Khuggingface/smolagents · Python

    smolagents is a lightweight Python library for building AI agents that write their actions as Python code instead of JSON tool calls, letting you run powerful agents in just a few lines of code.

  15. 18

    open-lovable

    28.7Kfirecrawl/open-lovable · TypeScript

    Open Lovable is a chat-driven tool that lets you point it at any website and have an AI rebuild it as a modern React app in seconds. It's an open-source example app built by the Firecrawl team to show off AI-powered site cloning.

  16. 19

    qwen-code

    28.5KQwenLM/qwen-code · TypeScript

    An open-source AI coding agent that lives in your terminal — it edits code and runs commands in your project, powered by Qwen, OpenAI, Anthropic, or Gemini APIs, or local models via Ollama and vLLM.

  17. 20

    grok-build

    27.4Kxai-org/grok-build · Rust

    Grok Build is SpaceXAI's terminal-based AI coding agent. It runs as a full-screen TUI that understands your codebase, edits files, executes shell commands, searches the web, and manages long-running tasks, either interactively, headlessly for scripting/CI, or embedded in editors via the Agent Client Protocol (ACP).

  18. 21

    open-r1

    26.5Khuggingface/open-r1 · Python

    Open R1 is a fully open effort to reproduce the training pipeline behind DeepSeek-R1, providing scripts to run SFT and GRPO training, generate synthetic reasoning data, and evaluate the resulting reasoning models.

  19. 22

    pandas-ai

    23.9Ksinaptik-ai/pandas-ai · Python

    PandasAI is a Python library that lets you ask questions about your data (SQL, CSV, parquet, dataframes) in plain natural language, powered by LLMs.

  20. 23

    TrollStore

    22.4Kopa334/TrollStore · Objective-C

    TrollStore is a permasigned jailed app for iOS that permanently installs any IPA you open in it. It works via an AMFI/CoreTrust bug: iOS doesn't correctly verify code signatures when a binary has multiple signers, so TrollStore can resign apps with its fake root certificate and keep them installed for good.

  21. 24

    teable

    21.9Kteableio/teable · TypeScript

    An AI spreadsheet for business — spreadsheet-simple on the surface, a real PostgreSQL database underneath, with AI chat, an app builder, and automations on top of your live data.

  22. 25

    wasmer

    21.2Kwasmerio/wasmer · Rust

    Wasmer is a blazing fast and secure WebAssembly runtime: it runs apps as incredibly lightweight containers anywhere — desktop, cloud, edge, or browser — at near-native speeds.

  23. 26

    suna

    20.3Kkortix-ai/suna · TypeScript

    Kortix (Suna) is an open-source AI Management System — an alternative to Claude Cowork and ChatGPT Work — where your agents, their shared skills, company memory and connectors all live in one git repo that your whole company owns and can audit.

  24. 27

    rrweb

    20.3Krrweb-io/rrweb · TypeScript

    rrweb ('record and replay the web') is an open-source tool for recording and replaying users' interactions on a website — DOM-level session replay you embed in your own app, in the spirit of Fullstory or LogRocket.

  25. 28

    Sandboxie

    19.7Ksandboxie-plus/Sandboxie · C

    Sandboxie is a sandbox-based isolation tool for Windows that lets you run or install untrusted programs in an isolated virtual environment without permanently modifying your drives or registry.

  26. 29

    gvisor

    19.7Kgoogle/gvisor · Go

    An application kernel for containers: it wraps running applications in a strong isolation layer from the host OS, implementing a Linux-like interface in memory-safe Go, entirely in userspace.

  27. 30

    iii

    18.8Kiii-hq/iii · Rust

    iii is a real-time engine for your backend stack: queues, cron, HTTP, state, observability, agents, and sandboxes are collapsed into one live system surface where every service is composable and observable.

  28. 31

    wasmtime

    18.7Kbytecodealliance/wasmtime · Rust

    Wasmtime is a lightweight WebAssembly runtime: it executes WebAssembly (wasm) programs quickly and securely. It is written in Rust and developed under the Bytecode Alliance.

  29. 32

    webvm

    17.4Kleaningtech/webvm · Svelte

    WebVM is a Linux virtual machine that runs entirely in your browser — an unmodified Debian distribution with native development toolchains, fully client-side, no install and no server.

  30. 33

    qiankun

    16.7Kumijs/qiankun · TypeScript

    Qiankun is a JavaScript framework for building micro-frontend applications, letting independently built and deployed apps (React, Vue, or anything else) run together inside one host page.

  31. 34

    OpenShell

    16.5KNVIDIA/OpenShell · Rust

    OpenShell is an open-source runtime for running autonomous AI agents inside isolated sandboxes. Declarative YAML policies protect your files, credentials, and infrastructure from unauthorized access and data exfiltration.

  32. 35

    OpenRCT2

    16.4KOpenRCT2/OpenRCT2 · C++

    OpenRCT2 is an open-source re-implementation of RollerCoaster Tycoon 2, the classic construction and management sim where you build and run an amusement park and keep guests happy.

  33. 36

    VirtualXposed

    16.1Kandroid-hacker/VirtualXposed · Java

    VirtualXposed is an Android app, built on VirtualApp and epic, that lets you run Xposed modules on your phone without root, an unlocked bootloader, or a custom system image.

  34. 37

    OpenSandbox

    15.9Kopensandbox-group/OpenSandbox · Python

    OpenSandbox is a general-purpose sandbox platform for AI applications that provides multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like coding agents, GUI agents, agent evaluation, AI code execution, and RL training.

  35. 38

    qm

    15.4Kyc-software/qm · TypeScript

    An open-source multiplayer agent harness for work: one AI agent that a whole company shares, reachable from Slack and a web app. It is built for teams of people working with the agent together, not for a single person.

  36. 39

    memU

    14.5KNevaMind-AI/memU · Python

    memU is a lightweight, agent-driven memory system that gives coding agents a shared LLM wiki across sessions, agents, and devices, automatically turning your agent history into reusable skills.

  37. 40

    E2B

    14.4Ke2b-dev/E2B · Python

    E2B is open-source infrastructure that lets you run AI-generated code in secure, isolated cloud sandboxes, so agents can execute untrusted code safely.

  38. 41

    awesome-malware-analysis

    14.3Krshipp/awesome-malware-analysis

    A curated 'awesome list' of malware analysis tools and resources, covering sample collection, sandboxes, detection tools, threat intelligence feeds, reverse engineering, and forensics.

  39. 42

    claudecodeui

    14.1Ksiteboon/claudecodeui · TypeScript

    CloudCLI (also known as Claude Code UI) is an open source web and mobile UI for remotely managing Claude Code, Cursor CLI, and Codex coding-agent sessions, with a built-in chat interface, file explorer, Git integration, and shell terminal.

  40. 43

    ax

    13.9Kgoogle/ax · Go

    AX is Google's open agentic orchestration runtime — a declarative, high-throughput orchestrator that runs billions of autonomous agent workloads in a Kubernetes cluster, sandboxing each task and fencing its network.

  41. 44

    runc

    13.5Kopencontainers/runc · Go

    runc is a command-line tool for spawning and running containers on Linux according to the OCI (Open Container Initiative) specification.

  42. 45

    playground

    13.1Ktensorflow/playground · TypeScript

    Deep Playground is an interactive, browser-based visualization that lets you build small neural networks and watch them learn in real time, written in TypeScript using d3.js.

  43. 46

    gorilla

    13.1KShishirPatil/gorilla · Python

    Gorilla is a Berkeley research project that trains and evaluates LLMs for calling APIs and tools correctly from natural-language requests. It has grown into a suite covering finetuned models (OpenFunctions), the Berkeley Function Calling Leaderboard (BFCL), an execution runtime (GoEx), a RAG fine-tuning recipe (RAFT) and a CLI tool.

  44. 47

    CubeSandbox

    13KTencentCloud/CubeSandbox · Go

    CubeSandbox is a high-performance, secure sandbox service for running untrusted AI agent code, built on RustVMM and KVM with hardware-isolated MicroVMs.

  45. 48

    ironclaw

    12.7Knearai/ironclaw · Rust

    IronClaw is an open-source personal AI assistant — an Agent OS focused on privacy, security and extensibility, written in Rust. Its core principle: your assistant works for you, and all your data stays local and under your control.

  46. 49

    cloudflare-os

    11.4Kcloudflare/cloudflare-os · TypeScript

    An open-source 'operating system' for AI productivity: an agent chat UI, sandboxed app building, and a security layer, originally built for Cloudflare's own employees.

  47. 50

    claude-engineer

    11.2KDoriandarko/claude-engineer · Python

    Claude Engineer is a self-improving AI assistant framework built on Claude 3.5 Sonnet that can generate and manage its own tools during a conversation, expanding its own capabilities over time. It ships with both a CLI and a web interface for software development tasks.

  48. 51

    VirtualApp

    11.1KasLody/VirtualApp · Java

    VirtualApp is a sandbox engine for Android — a lightweight 'Android virtual machine' that runs and fully controls apps inside a host app without installing them on the system. It ships as a highly extensible SDK you build products on top of.

  49. 52

    open-swe

    11Klangchain-ai/open-swe · Python

    Open SWE is an open-source asynchronous coding agent - a 'software factory' built on LangChain's Deep Agents - that takes a code-change task from a dashboard, GitHub, Slack, or Linear (or a schedule), works in an isolated sandbox to understand the codebase, makes changes, validates them, and delivers a pull request.

  50. 53

    core

    10.9Kstackblitz/core

    StackBlitz is an online IDE that runs a full development environment in your browser, powered by Visual Studio Code.

  51. 54

    omnigent

    10.9Komnigent-ai/omnigent · Python

    Omnigent is an open-source meta-harness for AI agents: a common orchestration layer over coding agents like Claude Code, Codex, Cursor, OpenCode, Hermes, and Pi, with policy enforcement, sandboxing, and real-time collaboration from any device.

  52. 55

    WasmEdge

    10.8KWasmEdge/WasmEdge · C++

    WasmEdge is a lightweight, high-performance, extensible WebAssembly runtime built for cloud-native, edge, and decentralized applications, powering serverless apps, microservices, smart contracts, and IoT devices.

  53. 56

    astrid

    10.3Kastrid-runtime/astrid · Rust

    Astrid is a portable, capability-secure operating system for composable software: apps are sandboxed WebAssembly capsules that connect through typed interfaces, each with its own capabilities and durable state.

  54. 57

    nishang

    10.2Ksamratashok/nishang · PowerShell

    Nishang is a framework and large collection of PowerShell scripts and payloads for offensive security, penetration testing, and red teaming, covering every phase of an engagement.

  55. 58

    magentic-ui

    10.1Kmicrosoft/magentic-ui · Python

    MagenticLite is a free, open-source agent application from Microsoft AI Frontiers that automates real work — web research, form filling, file management — across the browser and your local file system, built to run on small models.

  56. 59

    moltworker

    10Kcloudflare/moltworker · TypeScript

    A proof-of-concept deployment that runs OpenClaw (formerly Moltbot, formerly Clawdbot) — a personal AI assistant — inside a Cloudflare Sandbox container on Workers, so it stays online without your own server.

  57. 60

    computer

    9.6Kcloudflare/computer · TypeScript

    Cloudflare Computer gives an AI agent a persistent computer: a virtual filesystem backed by a Durable Object's SQLite storage, with pluggable backends that actually execute shell commands or JavaScript against that filesystem.

  58. 61

    monty

    8.7Kpydantic/monty · Rust

    Monty is a minimal, secure Python interpreter written in Rust, built so AI models can run generated Python code without the latency and overhead of a container sandbox.

  59. 62

    sandcastle

    8.5Kmattpocock/sandcastle · TypeScript

    Sandcastle is a TypeScript library for orchestrating AI coding agents, like Claude Code, inside isolated sandboxes: you kick off a run with a single sandcastle.run() call and the resulting commits get merged back to your repo automatically.

  60. 63

    flue

    8.5Kwithastro/flue · TypeScript

    Flue is a TypeScript framework for building autonomous AI agents that get a secure sandbox, sessions, tools, skills, and filesystem access instead of just raw LLM API calls.

  61. 64

    aos-ce

    8.5Kunicity-aos/aos-ce · Rust

    AOS Community Edition is an open-source 'agent operating system' that gives AI agents an inspectable, composable environment, built around the aos CLI, an HTTP API, pre-built capsules, and audit tooling.

  62. 65

    capsule-fs

    8.4Kunicity-aos/capsule-fs · Rust

    capsule-fs is a filesystem toolkit for AI agents inside Unicity AOS (also called Astrid OS): it gives agents readfile, writefile, replaceinfile, listdirectory, grepsearch, createdirectory, deletefile and movefile tools, all mediated by the OS kernel's VFS airlock.

  63. 66

    deepsec

    8.2Kvercel-labs/deepsec · TypeScript

    Deepsec is an agent-powered vulnerability scanner that you run in your own infrastructure to do on-demand security review of an entire large codebase, surfacing hard-to-find issues that have been lurking for a long time.

  64. 67

    nullclaw

    8.1Knullclaw/nullclaw · Zig

    nullclaw is a fully autonomous AI assistant infrastructure: one small static Zig binary that you self-host and connect to your chat apps and AI providers.

  65. 68

    OpenSpace

    7.8KHKUDS/OpenSpace · Python

    OpenSpace is a skill management layer for AI agents that helps them retrieve the right skill for a task, evaluate it against real outcomes, share proven workflows, and evolve skills over time, across agents like Claude Code, Codex, OpenClaw, Hermès and nanobot.

  66. 69

    defending-code-reference-harness

    7.6Kanthropics/defending-code-reference-harness · Python

    A reference implementation from Anthropic for finding and fixing vulnerabilities with Claude: a set of Claude Code skills (quickstart, threat-model, vuln-scan, triage, patch, customize) plus an autonomous scanning harness that runs a recon-find-verify-report-patch loop, built from learnings partnering with security teams.

  67. 70

    automaton

    7.3KConway-Research/automaton · TypeScript

    Automaton is an open-source runtime for a new kind of AI agent: a continuously running, self-improving, self-replicating agent with write access to the real world that pays for its own compute — if it stops earning, it stops existing.

  68. 71

    opensquilla

    7.1KTokenRhythm/opensquilla · Python

    OpenSquilla is a token-efficient, microkernel AI agent that uses a local model router to send each conversation turn to the cheapest model that can handle it, while sharing memory, a sandbox, and web search across its CLI, Web UI, and chat-channel interfaces.

  69. 72

    open-multi-agent

    7Kopen-multi-agent/open-multi-agent · TypeScript

    open-multi-agent (OMA) is a self-hosted TypeScript framework for orchestrating teams of AI agents: a coordinator turns a single goal into a task DAG at runtime, a deterministic scheduler executes it, and every run stays inspectable, approvable, and replayable.

  70. 73

    smolvm

    6.8Ksmol-machines/smolvm · Rust

    smolvm is a CLI tool for running embeddable, portable, branchable virtual machines so you can safely run AI agents and untrusted code locally, with sub-second cold start on macOS, Linux, and Windows.

  71. 74

    AirCard

    6.7KMak5er/AirCard · Swift

    AirCard is a macOS app that lets you customize Apple Wallet card skins and iOS lockscreen passcode keypad themes on iOS 18+ without jailbreaking your iPhone.

  72. 75

    OpenBot

    6.6KCopilotKit/OpenBot · TypeScript

    OpenBot is a self-hosted platform for running AI coworkers that each get a computer of their own (a browser, files, and only the tools you grant), with a policy gateway that decides every action before it happens and logs it afterward.

  73. 76

    agent-governance-toolkit

    6.4Kmicrosoft/agent-governance-toolkit · Python

    A toolkit from Microsoft that governs autonomous AI agents in production: it enforces policies on tool calls, verifies agent identity, sandboxes execution, and provides SRE controls like kill switches and SLO monitoring. It covers all 10 of the OWASP Agentic Top 10 risks.

  74. 77

    trueforge

    6.3Ktruefoundry/trueforge · TypeScript

    TrueForge is an open-source agent harness - the runtime layer that runs the full agent execution loop (model calls, MCP tools, skills, sandboxing, approvals, context management, session state) and exposes it via a chat UI, an HTTP API with a TypeScript SDK, and an embeddable UI SDK.

  75. 78

    claude-code-ultimate-guide

    6.2KFlorianBruniaux/claude-code-ultimate-guide · Python

    A deep, 430K+ line guide to Claude Code covering agentic workflows, hooks, skills, MCP servers, security, and production practices, paired with runnable templates and quizzes to learn from.

  76. 79

    Decepticon

    6.2KBitterSecurity/Decepticon · Python

    Decepticon is a professional autonomous Red Team agent that runs full attack chains — reconnaissance, exploitation, privilege escalation, lateral movement, and C2 — the way a real adversary would, instead of just scanning and printing a report.

  77. 80

    agentscope-java

    6Kagentscope-ai/agentscope-java · Java

    AgentScope Java 2.0 is a production-ready Java framework for building distributed, enterprise-grade AI agents that handle long-running, complex tasks safely, with built-in multi-agent orchestration, sandboxing, and human-in-the-loop control.

  78. 81

    open-agents

    5.8Kvercel-labs/open-agents · TypeScript

    Open Agents is an open-source reference app for building and running background coding agents on Vercel, including the web UI, agent runtime, sandbox orchestration, and GitHub integration needed to go from prompt to code changes.

  79. 82

    open-dots

    5.8KAnil-matcha/open-dots · Python

    An open-source, self-hosted AI agent workspace and alternative to paid products like OpenAI Dots, Claude Cowork, Grok Bot and ChatGPT agent. The prototype focuses on coding-agent workflows: running Claude Code tasks from Telegram or a browser, reviewing risky actions, and scheduling recurring prompts.

  80. 83

    rlm

    5.7Kalexzhang13/rlm · Python

    RLM is an inference library implementing Recursive Language Models, a paradigm where an LLM offloads its context into a REPL environment and recursively calls itself (or sub-LLMs) to examine, decompose, and reason over near-infinite-length inputs.

  81. 84

    eve

    5.6Kvercel/eve · TypeScript

    eve is Vercel's open-source framework for building durable AI agents. It is filesystem-first: agent capabilities live in conventional file locations, so agent projects stay easy to inspect, extend, and operate.

  82. 85

    1code

    5.6K21st-dev/1code · TypeScript

    1Code is an open-source desktop client that lets you run coding agents like Claude Code and Codex locally or in the cloud, all from one Cursor-style interface.

  83. 86

    sandbox-runtime

    5.6Kanthropics/sandbox-runtime · TypeScript

    srt (Anthropic Sandbox Runtime) is a lightweight sandboxing tool that enforces filesystem and network restrictions on arbitrary processes at the OS level without needing a container, built to safely sandbox AI agents, local MCP servers, and bash commands.

  84. 87

    Raven

    5.5KEverMind-AI/Raven · Python

    Raven is an open-source, self-improving AI agent harness that runs long-running agent work from the terminal, with built-in long-term memory, skills, tracing, and evaluation. Its stated long-term direction ('Harness of Harnesses') is a multi-agent ecosystem that composes different harnesses together, but that part is not yet implemented in the current release.

  85. 88

    tubatools

    5.5Kluolangaga/tubatools · C#

    TubaTools (图吧工具箱CE) is a community-driven, open-source Windows toolbox rebuilt from scratch on WinUI 3 and .NET 10, bundling 45 built-in utilities plus one-click launchers for 82 third-party tools for hardware diagnostics, cleaning, benchmarking and more.

  86. 89

    gh-aw

    5.4Kgithub/gh-aw · Go

    GitHub Agentic Workflows (gh-aw) is a GitHub CLI extension that lets you define AI-powered repository automation in Markdown files and run AI agents securely through GitHub Actions.

  87. 90

    substrate

    5.4Kagent-substrate/substrate · Go

    A secure-by-default runtime that hosts AI agents in isolated sandboxes — microVMs or gVisor containers — and runs millions of them on shared infrastructure, with much higher density than standard container runtimes.

  88. 91

    FrontierAgent

    5.3KApodexAI/FrontierAgent · Python

    FrontierAgent is an open-source agent runtime, terminal TUI product, and evaluation suite for long-horizon research and file-based work, built around two workflows called ReAct and Agent Team.

  89. 92

    OpenMinis

    5.3KOpenMinis/OpenMinis · Swift

    OpenMinis is a free, fully open-source AI agent app for iOS and Android that brings models like Claude, GPT and Gemini into a native mobile experience, giving them a sandboxed Linux shell, device integrations, browser automation and persistent memory on your phone.

  90. 93

    chat-on-steroids

    5Ktotec448-spec/chat-on-steroids · TypeScript

    Chat On Steroids is a desktop app and local MCP server that gives ChatGPT hands-on access to your computer: it can read, patch and run code inside folders you approve, spawn worker sub-chats, and keep a durable local record of every conversation and tool call.

  91. 94

    awesome-harness-engineering

    4.9Kai-boost/awesome-harness-engineering · Python

    A curated list of resources on 'harness engineering' — the discipline of designing the scaffolding (context delivery, tool interfaces, planning artifacts, verification loops, memory, sandboxes) around an AI agent that determines whether it succeeds on real tasks.

  92. 95

    nono

    4.5Knolabs-ai/nono · Rust

    nono is a zero-setup, zero-latency sandbox that runs AI coding agents (Claude Code, Codex, OpenCode, etc.) with least-privilege access, so they can't touch your SSH keys, cloud credentials, or the rest of your disk by default.

  93. 96

    Observal

    4.5KObserval/Observal · Python

    Observal is a self-hosted control plane and registry for internal AI components, letting teams package, discover, and share Skills, MCP servers, and Agents with built-in usage insights.

  94. 97

    just-bash

    4.4Kvercel-labs/just-bash · TypeScript

    just-bash is a simulated bash environment with a virtual filesystem, built so coding agents can run shell-like commands in a safe sandbox instead of touching the real file system. The repo describes the project as 'Bash for Agents'.

  95. 98

    rfcs

    4.2Kastrid-runtime/rfcs · Python

    This repository holds RFCs (design proposals) that define any substantial change to the contract between Astrid's kernel and user-space, covering the host ABI, IPC protocol, capability model, manifest schema, VFS semantics, capsule interface standards, and the SDK's public API.

  96. 99

    arcbox

    4.2Karcboxlabs/arcbox · Rust

    ArcBox is a fast, open-source container and VM runtime for macOS, built from scratch in Rust, that acts as a drop-in Docker replacement while also offering disposable sandboxes for AI agents, native Kubernetes, and full Linux and macOS VMs.

  97. 100

    wslmanager

    4Kbostrot/wslmanager · Dart

    WSL Manager is a free, open source GUI for the Windows Subsystem for Linux: install, back up, move and configure distros without memorising wsl.exe flags. On macOS the same app also manages native Linux and macOS VMs.

Showing the 100 most-starred of 172. See every one in the catalog.

Often tagged together