pearu/agent-sandbox

View on GitHub

Run any AI/LLM CLI inside a bubblewrap sandbox --- default-deny filesystem, an egress allowlist, and a key-safe SSH broker. Linux.

Is pearu/agent-sandbox beginner-friendly?

The maintainers of pearu/agent-sandbox usually reply to a pull request within 1 day. 1 beginner-friendly issue is open now.

Stars: 0
Forks: 0
Open beginner issues: 1
Indexed issues: 56
Avg merge: 2h 52m
Merged PRs (30d): 113

Dominant language: Shell
License: BSD-3-Clause
Last GitHub push: Sep 28, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

How to contribute to pearu/agent-sandbox

Read the contributing guide first: it says how the maintainers want changes proposed, tested and reviewed.
Your contributions will be published under the project's BSD-3-Clause license.
Pick the open beginner-friendly issue below and comment that you want to work on it before you start.

Beginner friendly Everything

Open All

Issues somebody may already be working on are listed last. List everything by date

A pty per join: job control and `SIGWINCH` for a joined command on every kernel
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 52/100

pearu/agent-sandbox#165 · Opened Sep 30, 2026

Maintainers usually reply within 1 day
Does a subagent definition's `tools:` bypass the permission check? One default-permission cell
Open
- Is something wrong?
Difficulty 2/5 1-3 hours Newbie friendliness 72/100

pearu/agent-sandbox#156 · Opened Sep 30, 2026

Maintainers usually reply within 1 day
Seeded `join-scoped` stores: `copy`, `seed-only` and `copy-on-write` for one join
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 35/100

pearu/agent-sandbox#153 · Opened Sep 29, 2026

Maintainers usually reply within 1 day
Files in `~/.claude` outside every channel are the native files, writable from inside — hook scripts included
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 35/100

pearu/agent-sandbox#142 · Opened Sep 29, 2026

Maintainers usually reply within 1 day
The keeper's supervisor rebinds a single-file bind when its source is replaced
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 45/100

pearu/agent-sandbox#140 · Opened Sep 29, 2026

Maintainers usually reply within 1 day
copy-on-write on a single file: measured, and parked until there is a use case
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 20/100

pearu/agent-sandbox#134 · 1 comment · Opened Sep 28, 2026

Maintainers usually reply within 1 day
Plan: implementing roles, the keeper and storage through 0.4.0
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 25/100

pearu/agent-sandbox#129 · 1 comment · Opened Sep 28, 2026

Maintainers usually reply within 1 day
`--try-run`: run a session against cloned sources, then inspect or discard
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 45/100

pearu/agent-sandbox#115 · 4 comments · Opened Sep 22, 2026

Maintainers usually reply within 1 day
A session self-report: what this sandbox connects, and where anything could flow
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 45/100

pearu/agent-sandbox#114 · 1 comment · Opened Sep 22, 2026

Maintainers usually reply within 1 day
Channel groups: a per-channel override can split a coupling, and both known splits fail silently
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 28/100

pearu/agent-sandbox#112 · Opened Sep 22, 2026

Maintainers usually reply within 1 day
Audit the egress allowlist against the vendor-documented required hosts, and record a disposition per host
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 52/100

pearu/agent-sandbox#110 · Opened Sep 21, 2026

Maintainers usually reply within 1 day
Leak study row 14b: remote-backed state needs an instance
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 35/100

pearu/agent-sandbox#89 · Opened Sep 16, 2026

Maintainers usually reply within 1 day
a sandboxed session can read the `gh` OAuth token from `~/.claude/gh`
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 35/100

pearu/agent-sandbox#88 · Opened Sep 16, 2026

Maintainers usually reply within 1 day
warn about `~/.claude` paths the profile does not classify
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 35/100

pearu/agent-sandbox#82 · Opened Sep 15, 2026

Maintainers usually reply within 1 day
`usage-data/` is globally visible across projects
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 52/100

pearu/agent-sandbox#79 · Opened Sep 15, 2026

Maintainers usually reply within 1 day
`image-cache/` is globally visible across projects
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 48/100

pearu/agent-sandbox#77 · Opened Sep 15, 2026

Maintainers usually reply within 1 day
`agent-memory/` (subagent memory) is not isolated across projects
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 45/100

pearu/agent-sandbox#74 · Opened Sep 15, 2026

Maintainers usually reply within 1 day
session-role sandboxing: a --role overlay that hides an implementer's accumulated history from a reviewer
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 35/100

pearu/agent-sandbox#55 · Opened Sep 14, 2026

Maintainers usually reply within 1 day
Roadmap: additional agent profiles (codex, gemini, ollama/OpenAI-compatible, generic command)
Open
- Is something wrong?
enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

pearu/agent-sandbox#10 · Opened Sep 8, 2026

Maintainers usually reply within 1 day
Profile: generic command (sandbox an arbitrary worker)
Open
- Is something wrong?
enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

pearu/agent-sandbox#9 · Opened Sep 8, 2026

Maintainers usually reply within 1 day
Profile: ollama / OpenAI-compatible endpoint
Open
- Is something wrong?
enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

pearu/agent-sandbox#8 · Opened Sep 8, 2026

Maintainers usually reply within 1 day
Profile: gemini (Gemini CLI)
Open
- Is something wrong?
enhancement

Difficulty 3/5 1-2 days Newbie friendliness 72/100

pearu/agent-sandbox#7 · Opened Sep 8, 2026

Maintainers usually reply within 1 day
Profile: codex (OpenAI Codex CLI)
Open
- Is something wrong?
enhancement

Difficulty 3/5 1-2 days Newbie friendliness 70/100

pearu/agent-sandbox#6 · Opened Sep 8, 2026

Maintainers usually reply within 1 day
Run without a user systemd (WSL without systemd, containers)
Open
- Is something wrong?
enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

pearu/agent-sandbox#3 · Opened Sep 8, 2026

Maintainers usually reply within 1 day
strict mode: support IPv6 SSH hosts in --ssh
Open
- Is something wrong?
enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

pearu/agent-sandbox#2 · Opened Sep 8, 2026

Maintainers usually reply within 1 day

pearu/agent-sandbox

Is pearu/agent-sandbox beginner-friendly?

How to contribute to pearu/agent-sandbox

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Get new issues in your inbox