Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.
🔒🐧 Run command in a secure native sandbox (zero deps)
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
Lightweight, container-free sandbox for running commands with network and filesystem restrictions
A cross-platform security sandbox CLI tool that executes commands with restricted file system write access while maintaining full read permissions.
An OpenCode plugin that sandboxes agent-executed commands using @anthropic-ai/sandbox-runtime
A sandbox for coding agents with parametrized state.
Sandbox for securely executing untrusted programs
Linux sandboxing that doesn't get in your way
