seatbelt 开源项目推荐（74 个）

domcyrus /rustnet

为你的终端提供按进程网络监控，支持深度包检测。跨平台，沙箱化。

fencesandbox /fence

轻量级、无容器的沙箱，用于在限制网络和文件系统的情况下运行命令

strands-agents /box

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon and Linux.

kstenerud /yoloai

权限疲劳确实是个大问题。沙盒逃脱确实是个大问题。yoloAI 解决了这个问题。

dredozubov /hazmat

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

valpackett /rusty-sandbox

A sandboxing library for Rust | now on https://codeberg.org/valpackett/rusty-sandbox

askbudi /tinyagent

Tiny Agent：面向每位开发者的生产就绪 LLM 智能体 SDK

FlapPearLabs /workbuddy-toolkit

WorkBuddy Multi-Account Manager & Automated Check-in Toolkit (多账号轮换、全域工作区打通与自动化签到)

can1357 /isobox

Run a command in a sandbox with the same flags on every OS — one capability model compiled to Seatbelt (macOS), gVisor (Linux), and AppContainer (Windows).

fwdai /fletch

A new kind of IDE for agentic engineering

agentic-dev3o /sandbox-shell

macOS Seatbelt sandbox CLI for developers. Protect credentials (SSH, AWS, GPG) from malicious npm packages, supply chain attacks, and untrusted build scripts. Deny-by-default filesystem isolation. Perfect for Claude Code agentic workflows with --dangerously-skip-permissions.

Dyztiny-Project /DyzCarSystem

The vehicle HUD for FiveM NUI.

cherrchen /dsh-plugin-multi-root-workspace

多文件夹 workspace：让 DSH（DeepSeek Harness）的 Agent 不只能读写主目录，还能同时读写你添加的其他文件夹。Multi-folder workspace for DeepSeek Harness: let the agent read and write several folders at once, not just the primary one.

ssmirr /opencode-seatbelt

A real kernel sandbox for OpenCode on macOS 🛡️

valentinradu /Pent

Run any untrusted process with restricted filesystem and network access, using native OS primitives.

cdxgen /safer-exec

OS-level sandboxing with tracing, auditing, and learning mode for arbitrary binaries.

Rani367 /Skarn

A fast, OS-sandboxed Model Context Protocol gateway with an embedded Code Mode engine and shell-output token compression, in a single Rust binary.

MacRichards /CarHudLights

Car hud light panel for FiveM servers

kontext-security /sandy

在沙箱中运行 agent，几秒内即可保障其安全。

emretheus /inclave

Local-first AI assistant for macOS — chat with your PDFs, spreadsheets, CSVs and code using a local LLM via Ollama. Model-generated Python runs in a Seatbelt sandbox with no network. No cloud, no telemetry, no API keys.