ashishb/amazing-sandbox
View on GitHub ↗ ★ 192 Go
Amazing Sandbox - run third-party tools and AI agents securely on your machine
27 mentions on Hacker News by 4 people: 2 stories, 25 comments · first 2025-12-22 · latest 2026-10-30
20082026
-
…all your code and data will move under that. I run it in an ephemeral container sandbox ( https://github.com/ashishb/amazing-sandbox ) which has access to the current working directory and it drastically limits the attack radius.
comment by ashishb · 2026-10-30 · in Backdoor in Claude Code for VS Code extension on the Cursor Marketplace -
Exactly, that's what I do, I even up end up writing my own for this purpose - https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-10-12 · in Codex CLI installs a persistent, self-updating background daemon by default -
…scripts full disk access. Indeed, I run all dev tools including coding agents inside sandbox now https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-10-02 · in Updates to Full Disk Access in macOS -
I wrote this for myself and have been using it regularly. It is FOSS https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-08-10 · in Docker Sandboxes – Disposable, isolated sandboxes for AI agents -
Here's another sandbox that I found interesting: https://github.com/ashishb/amazing-sandbox
comment by navigate8310 · 2026-08-10 · in Docker Sandboxes – Disposable, isolated sandboxes for AI agents -
…execute 100s of packages written by various authors. One should sandbox all npm command executions. https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-07-21 · in NPM's release cooldown is security theater -
…don't want to count on whether "uploading all files it can access" is intentional or a mistake. 1 - https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-07-12 · in What xAI's Grok build CLI sends to xAI: A wire-level analysis -
> https://github.com/ashishb/amazing-sandbox Does your Docker backend run commands in rootless containers? I skimmed the code but didn't see anything to confirm this.
comment by pritambaral · 2026-06-09 · in Microsoft's open source tools were hacked to steal passwords of AI developers -
Nobody should do 'npm install' or 'pip install' on their machine. Using a proper sandboxing( https://github.com/ashishb/amazing-sandbox ) regularly will drastically limit the blast radius of these attacks.
comment by ashishb · 2026-06-09 · in Microsoft's open source tools were hacked to steal passwords of AI developers -
Then try https://github.com/ashishb/amazing-sandbox I use it every day for CLI tools > How would you sandbox an Electron app I haven't figured that out yet
comment by ashishb · 2026-05-13 · in Postmortem: TanStack NPM supply-chain compromise -
…sandbox [1] for myself last year to control the blast radius of such malicious packages. https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-03-31 · in Axios compromised on NPM – Malicious versions drop remote access trojan -
…inside the containers are not inconvenient at all for me. Infact, I even open-sourced my setup - https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-03-29 · in Telnyx package compromised on PyPI -
…I'll emphasize again, "no linter/scanner/formatter (e.g., trivy) should need full disk access". 1 - https://github.com/ashishb/amazing-sandbox/blob/fddf04a90408...
comment by ashishb · 2026-03-25 · in Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised -
…the attack surface of running third-party Python/Go/Rust/Haskell/JS code on your machine. 1 - https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-03-25 · in Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised -
…running all third-party tools inside the Amazing Sandbox[1]. I made it public last year. 1 - https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-03-25 · in Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised -
I built something similar for myself that works on both Linux and Mac OS https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-03-09 · in Agent Safehouse – macOS-native sandboxing for local agents -
…for myself after seeing how prolific these attack vectors have become in recent years. 1 - https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-03-06 · in A GitHub Issue Title Compromised 4k Developer Machines -
Try https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-02-03 · in Sandboxing AI Agents in Linux -
…so that it works on Mac OS as well and can be used for other tools (but just AI agents) as well https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-02-03 · in Sandboxing AI Agents in Linux -
…files safe. For some tools like markdown linter, I run them without network access as well. 1- https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-01-13 · in A deep dive on agent sandboxes -
That's why I run it inside a sandbox - https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-01-12 · in Cowork: Claude Code for the rest of your work -
…I moved to a Dockerized sandbox[1], and I feel much better now against such malicious packages. 1 - https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2026-01-05 · in Sandboxing Untrusted Python -
…of it into a single tool[2] for ease of use. 1 - https://news.ycombinator.com/item?id=45766478 2 - http://github.com/ashishb/amazing-sandbox
comment by ashishb · 2025-12-30 · in Show HN: A Claude Code plugin that catch destructive Git and filesystem commands -
I run them inside a sandbox https://github.com/ashishb/amazing-sandbox
comment by ashishb · 2025-12-29 · in Karpathy on Programming: “I've never felt this much behind”