agent-substrate / substrate

Zero-trust runtime that sandboxes and snapshots large numbers of untrusted agent workloads on standard Kubernetes.

microsoft / mxc

Sandboxed execution system that runs untrusted code on Windows, Linux, and macOS using OS-native sandboxes or VMs behind one policy model.

zopefoundation / RestrictedPython

A restricted execution environment for Python to run untrusted code.

leizongmin / js-xss

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

google / wuffs

Wrangling Untrusted File Formats Safely

hyperlight-dev / hyperlight

Hyperlight is a lightweight Virtual Machine Manager (VMM) designed to be embedded within applications. It enables safe execution of untrusted code within micro virtual machines with very low latency and minimal overhead.

Katakate / k7

Your own self-hosted infra for lightweight VM sandboxes to safely execute untrusted code. CLI, API, Python SDK. ⭐ Star it if you like it! ⭐

paradigmxyz / iron-proxy

An egress firewall for untrusted workloads.

pallets / markupsafe

Safely add untrusted strings to HTML/XML markup.

rust-ammonia / ammonia

Repair and secure untrusted HTML

LSPosed / LSPromise

Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and CVE-2026-43284

basecamp / hotcell

☢️HotCell☢️ is an unprivileged sidecar container for handling untrusted inputs, purpose-built for Rails applications.

MichaelS1011 / ephemora-cell

Ephemeral, stateless, capability-bound execution for untrusted AI and agent-generated code.

plimsollmark / plimsoll

A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone needed: https://plimsollmark.github.io/plimsoll/trainers/