Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

[Feature]: Sandbox Feature like the one used by Deepseek Harness

Open
#3,179 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
30/100
Issue type
Feature
Clarity
Mostly clear
Activity status
Active
Tech stack
linux, rust
Domain
desktop, security

Research direction

Start with the Agent runtime / core surface and investigate how file-write permissions are currently applied. Review the referenced Deepseek sandbox packages for their Windows ACL and Linux behavior. Done means the agent can write within the workspace by default while writes outside it are blocked or require an explicit approval on both platforms.

Written by the indexing model from the issue text.

Description

Problem / opportunity

当前BitFun中运行的智能助理拥有对整个系统上所有路径的写权限。这是一件很危险的事。将权限模式调整为“需要确认”可以缓解该问题，但是这会导致AI运行过程中频繁中断请求用户批准，实际上我相信很多用户很快就会受不了然后改到“自动批准”模式了。

AI在我的电脑上今天就差点误删了重要文件。这显得一个sandbox机制是非常有必要的。

Proposed behavior

Deepseek Harness使用包 @deepseek-ai/dsh-sandbox-windows-acl 实现了windows上的沙箱机制、由@deepseek-ai/dsh-sandbox-local 包提供Linux上的沙箱机制，AI默认对工作区外的文件没有写权限。

希望BitFun能够参考相关机制，添加类似的功能。

Product surface

Agent runtime / core

Details, examples, or constraints

No response

Dominant language
Rust
Stars
2.3k
Forks
236
Avg merge
2h 56m
Merged PRs (30d)
619

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from GCWing/OpenBitFun

All issues in GCWing/OpenBitFun

Similar issues

More Rust issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.