awesome-repositories.com
Blog
MCP
awesome-repositories.com

Descubre los mejores repositorios open-source con nuestra búsqueda potenciada por IA.

ExplorarBúsquedas curadasAlternativas open-sourceSoftware autohospedableBlogMapa del sitio
ProyectoServidor MCPAcerca deCómo clasificamosPrensa
Aviso legalPrivacidadTérminos
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·

14 repositorios

Awesome GitHub RepositoriesTask Sandboxing

Mechanisms for isolating task execution environments to prevent unauthorized file system access.

Distinct from Execution Sandboxes: Distinct from Execution Sandboxes: focuses specifically on task-scoped file system isolation rather than general command execution sandboxing.

Explore 14 awesome GitHub repositories matching development tools & productivity · Task Sandboxing. Refine with filters or upvote what's useful.

Awesome Task Sandboxing GitHub Repositories

Encuentra los mejores repositorios con IA.Buscaremos los repositorios que mejor coincidan usando IA.
  • daytonaio/daytonaAvatar de daytonaio

    daytonaio/daytona

    72,416Ver en GitHub↗

    Daytona is a cloud-native development environment platform designed to orchestrate ephemeral, containerized workspaces. It provides a centralized system for managing reproducible coding environments as code, ensuring consistency across distributed teams by abstracting the underlying infrastructure. By utilizing declarative configuration, the platform automates the entire lifecycle of development sandboxes, from initial provisioning to resource governance. The platform distinguishes itself through its infrastructure-agnostic runner layer, which allows development environments to be deployed ac

    Enforces maximum vCPU, memory, and storage quotas for individual sandboxes to ensure efficient infrastructure utilization.

    TypeScriptagentic-workflowaiai-agents
    Ver en GitHub↗72,416
  • nrwl/nxAvatar de nrwl

    nrwl/nx

    28,939Ver en GitHub↗

    This project is a build orchestration engine and development toolkit designed for managing large-scale monorepos. It provides a unified workspace environment that maps project relationships and dependencies, enabling the system to perform intelligent impact analysis and execute only the tasks affected by specific code changes. The system distinguishes itself through a persistent daemon that monitors file changes for near-instant feedback and a content-addressable caching mechanism that stores task outputs to prevent redundant computation across local and remote environments. It further suppor

    Isolates task execution environments to ensure build consistency and prevent unauthorized file access.

    TypeScriptangularbuildbuild-system
    Ver en GitHub↗28,939
  • esengine/deepseek-reasonixAvatar de esengine

    esengine/DeepSeek-Reasonix

    24,096Ver en GitHub↗

    DeepSeek-Reasonix is an autonomous software engineering framework and terminal-based AI IDE designed to coordinate large language models for complex programming tasks. It functions as a multi-session agent that utilizes a split planner and executor workflow to break down and implement technical objectives. The system distinguishes itself through a specialized focus on session optimization and extensibility. It employs prefix caching and append-only history to reduce token consumption and latency during long sessions. It further extends its capabilities by integrating external tool servers via

    Implements task sandboxing that restricts write access to a specific workspace and requires human approval.

    Goagentagent-frameworkai-agent
    Ver en GitHub↗24,096
  • kortix-ai/sunaAvatar de kortix-ai

    kortix-ai/suna

    19,388Ver en GitHub↗

    Suna is an orchestration platform designed for the deployment, management, and governance of autonomous AI agents. It provides a centralized system for defining agent behaviors and tool integrations, enabling the automation of complex business processes through a unified interface. The platform distinguishes itself by applying infrastructure-as-code principles to AI, utilizing version-controlled repositories to manage agent configurations, skills, and guardrails. It ensures secure and predictable operations by spawning ephemeral, isolated virtual machines for every individual task, preventing

    Spawns ephemeral, isolated virtual machines for every task to prevent state collisions and process interference.

    TypeScriptaiai-agentsllm
    Ver en GitHub↗19,388
  • langchain-ai/open-sweAvatar de langchain-ai

    langchain-ai/open-swe

    9,988Ver en GitHub↗

    Open-SWE is an asynchronous software engineering agent and orchestrator designed to automate end-to-end coding tasks and pull request reviews. It functions as a middleware framework that coordinates long-running AI operations across multiple subagents, utilizing state persistence and human-in-the-loop oversight to manage complex workflows. The system is distinguished by its use of isolated remote Linux sandboxes for secure code execution and shell command processing. It features a webhook-driven integration platform that triggers automated engineering tasks via mentions and events in GitHub,

    Provides a standard protocol to extend the isolation layer with new remote sandbox backend providers.

    Python
    Ver en GitHub↗9,988
  • oumi-ai/oumiAvatar de oumi-ai

    oumi-ai/oumi

    8,858Ver en GitHub↗

    Oumi is a comprehensive large language model development platform designed for synthesizing data, fine-tuning models, and running performance evaluations. It serves as a unified environment for the entire model lifecycle, encompassing a training and fine-tuning suite, an evaluation framework, and tools for synthetic data generation and model distillation. The platform is distinguished by its iterative, failure-driven synthesis approach, which analyzes model weaknesses during evaluation to generate targeted training data. It utilizes an LLM-based judge framework to programmatically score respo

    Limits the creation and execution of projects and training runs based on organization-level plans.

    Pythondpoevaluationfine-tuning
    Ver en GitHub↗8,858
  • evomap/evolverAvatar de EvoMap

    EvoMap/evolver

    8,744Ver en GitHub↗

    Evolver is a self-evolving AI agent framework that uses gene expression programming to autonomously improve agent behaviors through a continuous five-step loop of scanning, selecting, mutating, validating, and solidifying. It functions as an auditable evolution system that records every mutation and selection step, and can translate natural-language problems into executable Python code for automated grading and evaluation. The framework distinguishes itself through a distributed architecture that enables multiple agents to collaborate and share learned experiences across a network. It operate

    Periodically pulls validation tasks from a hub, runs proposer commands in a sandbox, and submits reports for reputation and credits.

    JavaScripta2aagent-evolutionagent-framework
    Ver en GitHub↗8,744
  • nebuly-ai/nebullvmAvatar de nebuly-ai

    nebuly-ai/nebullvm

    8,338Ver en GitHub↗

    Nebullvm is an AI inference accelerator, GPU resource orchestrator, and performance optimization library for large language models. It functions as an optimization layer designed to lower operational costs by aligning model execution with underlying hardware architectures. The system maximizes cluster efficiency through real-time dynamic partitioning and elastic quotas for shared hardware resources. It employs alignment methods and techniques to reduce the hardware and data requirements necessary for tuning large language models. The project covers broad capability areas including AI infrast

    Adjusts hardware resource limits in real time based on demand to balance performance across concurrent workloads.

    Python
    Ver en GitHub↗8,338
  • superradcompany/microsandboxAvatar de superradcompany

    superradcompany/microsandbox

    6,570Ver en GitHub↗

    Microsandbox is a runtime for creating and managing lightweight, hardware-isolated virtual machines — called sandboxes — that boot directly from standard OCI container images. Each sandbox runs as its own host process with a separate kernel, filesystem, and network stack, providing process-per-sandbox isolation. The project includes a command-line tool and multi-language SDKs (Rust, TypeScript, Python, Go) for programmatic lifecycle control, and it communicates with sandbox agents over Unix sockets using a CBOR-encoded protocol. What distinguishes Microsandbox is its combination of host-manag

    Establishes connections to sandbox agents by resolving names and performing handshakes.

    Rust
    Ver en GitHub↗6,570
  • memodb-io/acontextAvatar de memodb-io

    memodb-io/Acontext

    3,035Ver en GitHub↗

    Acontext is an LLM orchestration backend and agent memory framework designed to manage session state and knowledge for AI agents. It functions as a context manager and orchestration layer that integrates model providers with a secure code sandbox and a zero-knowledge data store. The project is distinguished by its approach to knowledge distillation, capturing agent learnings as reusable Markdown skills and structured memory files. It provides a secure execution environment where shell commands and scripts run in isolated containers with the ability to mount these persistent skill files direct

    Attaches specific skill files to a sandbox filesystem so that scripts can access and execute learned knowledge.

    TypeScriptagentagent-development-kitagent-observability
    Ver en GitHub↗3,035
  • project-hami/hamiAvatar de Project-HAMi

    Project-HAMi/HAMi

    3,028Ver en GitHub↗

    HAMi is a hardware orchestration and virtualization system designed to manage accelerators within Kubernetes. It functions as a device plugin that partitions physical hardware into isolated virtual slices, enabling multiple containers to share a single device through enforced memory limits and compute quotas. The project provides a virtualization manager and a heterogeneous compute scheduler that distributes tasks across diverse accelerator types. It uses packing and topology policies to optimize workload placement and allows for specific hardware targeting using unique device identifiers. T

    Applies hard memory and compute limits at runtime to prevent interfering workloads in shared environments.

    Goascendcambriconcncf
    Ver en GitHub↗3,028
  • ykdojo/claude-code-tipsAvatar de ykdojo

    ykdojo/claude-code-tips

    2,995Ver en GitHub↗

    This project is a collection of guides, toolkits, and scripts designed to optimize agentic coding workflows using large language models. It provides strategies for orchestrating AI agents, automating git patterns, and enhancing terminal-based development environments. The toolkit focuses on AI agent orchestration and git management, offering patterns for parallel codebase analysis and autonomous testing frameworks. It includes specialized workflows for conducting interactive pull request reviews and performing root cause analysis on continuous integration failures. The project covers a broad

    Isolates AI agent sessions within containers to prevent unsupervised research operations from affecting the host system.

    JavaScriptagenticagentic-aiagentic-coding
    Ver en GitHub↗2,995
  • agent-infra/sandboxAvatar de agent-infra

    agent-infra/sandbox

    2,569Ver en GitHub↗

    This project provides secure, containerized infrastructure designed for autonomous agents, remote code execution, and cloud development. It functions as a sandboxed environment where AI agents and external processes can execute code, run shell commands, and manage files while remaining isolated from the host system. The system distinguishes itself by implementing the Model Context Protocol, allowing it to act as a standardized tool server that exposes browser and filesystem capabilities to compatible clients. It further integrates headless browser automation, enabling programmatic web navigat

    Provides a dedicated command-line interface to execute browser and tool calls from within a container.

    Pythonagentall-in-onebrowser
    Ver en GitHub↗2,569
  • vercel/workflowAvatar de vercel

    vercel/workflow

    1,718Ver en GitHub↗

    Workflow is a platform for executing long-running, stateful processes that automatically persist progress and recover state after system interruptions. It functions as a durable orchestration engine designed to manage complex, multi-step asynchronous operations within distributed systems. The framework distinguishes itself through event-sourcing and checkpointing mechanisms that record execution steps as an immutable log, allowing for precise state reconstruction after failures. It provides sandboxed task isolation to run side-effect-heavy logic in restricted environments, ensuring that sensi

    Isolates task execution environments to prevent side effects from leaking into the main orchestration logic.

    TypeScript
    Ver en GitHub↗1,718
  1. Home
  2. Development Tools & Productivity
  3. Execution Sandboxes
  4. Task Sandboxing

Explorar subetiquetas

  • Decentralized Task ValidatorsSystems that pull validation tasks from a hub, run proposer commands in a sandbox, and submit reports for reputation and credits. **Distinct from Task Sandboxing:** Distinct from Task Sandboxing: focuses on decentralized validation with reputation and credit earning, not just execution isolation.
  • Knowledge-Aware SandboxingExecution environments that can dynamically mount specific knowledge assets or skill files into the isolated filesystem. **Distinct from Task Sandboxing:** Focuses on the ability to mount external knowledge files into a sandbox, rather than just isolating the task execution.
  • Resource Quotas1 sub-etiquetaEnforces limits on CPU, memory, and storage for isolated execution environments. **Distinct from Task Sandboxing:** Distinct from Task Sandboxing: focuses on resource-level enforcement rather than file system isolation.
  • Sandbox Provider Interfaces1 sub-etiquetaStandardized protocols for integrating different remote backend providers for file operations and shell execution. **Distinct from Task Sandboxing:** Distinct from Task Sandboxing: focuses on the integration interface for multiple providers rather than the isolation mechanism itself.