GITHUB TOPIC
33projects include this topic
The "sandbox" topic on GitHub groups 33 open-source projects in the DeepSeek Harness (DSH) ecosystem, led by sandbase-harness with 634 GitHub stars. sandbase-harness — Local-first AI agent runtime with sandboxed sessions, MCP tools, memory, credentials, audit/replay, and a built-in console. Every project here is indexed by DSH Universe with live GitHub data — stars, activity and install status — so you can compare and install directly.
{count} projects
Exact GitHub Topic match
sandbaseai
Local-first AI agent runtime with sandboxed sessions, MCP tools, memory, credentials, audit/replay, and a built-in console. Run OpenAI, Anthropic, MiniMax, DeepSeek V4, and OpenAI-compatible models on your infrastructure.
PerryLink
Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default, fully auditable from the session log (approval/asked -> autoReview/verdict -> approval/decided).
cofy-x
Open-source sandboxes for AI agents, untrusted code execution, and durable services.
sjh9714
Fix and diagnose DeepSeek Harness on native Windows. Official PowerShell, Workspace Write, shortcuts, and legacy preset repair. No WSL.
earthwalker17
Minimal surface, complete architecture: a small, local-first coding-agent harness that re-derives the invariants of DeepSeek Harness with fewer concepts. Independent educational project, not affiliated with DeepSeek.
tensorlakeai
A deepseek harness plugin for tensorlake sandbox
SeverusZh
dsh-yolo-mode - an LLM-powered auto-approval plugin for DeepSeek Harness sandbox escalations (built-in presets + custom permission levels, fail-closed)
azazo1
Prevents the model from rewriting specified paths in the workspace. Also lets you open up writes to certain external directories without opening the sandbox.
wangxing-git
DeepSeek Harness auto-approval plugin: deterministic rules + LLM safety review layered on top of the workspace-write sandbox; auto mode never loosens the sandbox, fail-closed. Safe auto-approval for DeepSeek Harness — deterministic rules + LLM review on top of the workspace-write sandbox. Auto mode without ever granting full-access.
zp-home
DSH plugin developer sandbox: spawn isolated DeepSeek Harness web mirror instances (own DSH_HOME/port/profile) that mount the plugin under development, with optional host API/model inheritance. GUI panel + sandbox_* agent tools.
blaxel-ai
Blaxel sandbox execution plugin for DeepSeek Harness
frozo-ai
Remote execution worlds for DeepSeek Harness: run the agent's Bash, terminals, LSP and file tools inside a container. Zero dependencies.
Jelee0145
Codex-style automated approval review for DeepSeek Harness: an isolated reviewer subagent decides sandbox escalations by intrinsic risk and user authorization. Community Beta — not an official DeepSeek AI plugin.
Linxiushen
QuickJS/WASM-isolated workflow engine for DeepSeek Harness with bounded resource controls
2-c-q
OS-isolated capability capsules for third-party DeepSeek Harness plugins
ArmyWas
Deterministic DeepSeek Harness plugin that explains Windows sandbox spawn EPERM failures in context
azazo1
按单命令前缀自动放行 DSH 沙箱提权请求, 含管道与链式的命令一律转人工审批.
ddll8023
Session access-mode plugin (Default / No Edit / Auto) for DeepSeek Harness (DSH). dsh-plugin
jhckevin
Codex-style Auto Review inspired plugin for DeepSeek Harness, with native bridge and Linux sandbox integration
NeevCloudAI
Run DeepSeek Harness against a gVisor-isolated cloud sandbox — files, Bash, PTY and LSP all move off your machine. Drop-in plugin, no fork, optional persistence.
Wang-Lin-Chang
Linux backend for dsh-witness/dsh-anchor: chattr + bubblewrap sandbox recipes. Every claim carries an experiment number.
Wang-Lin-Chang
macOS backend for dsh-witness/dsh-anchor: uchg + sandbox-exec sandbox recipes. Every claim carries an experiment number.
weijiafu14
Crash-resilient remote execution world for DeepSeek Harness: ctx.fs/ctx.subprocess over an E2B sandbox with heartbeat keep-alive, transparent recovery, and workspace sync.
YaoaY
GPT/Codex sandbox escalation parameter compatibility plugin for DSH | Fail-closed GPT/Codex sandbox escalation compatibility for DeepSeek Harness
AnakinCao
DSH Web GUI plugin: session-scoped "Allow for this session" option in the approval dialog (per-mode standing grants, localStorage) + right-panel auto-open guard
chengyimingvb
Stops the annoying black popup when DeepSeek-Harness runs tasks
codebam
Run DeepSeek Harness (dsh) command execution in OpenSandbox containers: an OpenSandbox-backed ctx.subprocess and container-world ctx.sandbox for dsh.
cup113
DeepSeek Harness（DSH）插件：Python 快捷执行工具，源码经 stdin 直灌 `python -X utf8 -u -`，一步返回结果，全链路 UTF-8，支持后台作业与沙箱提权。
DshMarketPlace
Sandboxed install validation for DeepSeek Harness plugins — installs each one into a fresh profile in a throwaway container and reports what the harness recorded
runseal-labs
RunSeal sandbox plugin: OS-native policy-enforced boundary for dsh (Windows/macOS/Linux) | RunSeal sandbox provider for DeepSeek Harness — OS-native policy-enforced command execution
tancheng33
Container-isolated backend for the DeepSeek Harness code-execution seam: Code Mode programs run in a fresh container with no network, a read-only rootfs, and kernel-enforced memory, CPU, and pid ceilings
zhang8019
Permission matrix for DeepSeek Harness: 3 sandbox modes x 4 approval strategies = 9 presets, with global and LLM-robot defaults, three-tier risk policies, audit log and git checkpoint.
zzzmmmnn
Remote-only OpenKapsel workspace bridge for the DeepSeek Harness: replaces host filesystem and shell tools with a fail-closed remote tool set. Self-hosted alternative to cloud agent sandboxes.