aaif-goose / goose
an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM
aaif-goose / goose
Dicklesworthstone / destructive_command_guard
The Destructive Command Guard (dcg) is for blocking dangerous git and shell commands from being executed by agents.
watchexec / watchexec
Executes commands in response to file modifications
shadow / shadow
Shadow is a discrete-event network simulator that directly executes real application code, enabling you to simulate distributed systems with thousands of network-connected processes in realistic and scalable private network experiments using your laptop, desktop, or server running Linux.
sheeki03 / tirith
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
tessi / wasmex
Execute WebAssembly from Elixir
starkware-libs / cairo-vm
cairo-vm is a Rust implementation of the Cairo VM. Cairo (CPU Algebraic Intermediate Representation) is a programming language for writing provable programs, where one party can prove to another that a certain computation was executed correctly without the need for this party to re-execute the same program.
RalfJung / cargo-careful
Execute Rust code carefully, with extra checking along the way
strands-agents / box
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
npci / ainxt-cli
AiNxt CLI is an open-source AI coding agent that brings AI-powered software development directly to the terminal. It can understand code, build features, fix issues, automate tasks and execute commands using the AI models and providers chosen by the developer.
submilli / submilli-runtime
Execute agent-generated TypeScript in isolated WebAssembly, with runtime-enforced semantic permissions.
obsidiansystems / cargo-dyndrv
Execute the Cargo build graph with Nix derivations, dynamically