box
AgentFREERun AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
strands-agents/box · Apache-2.0 · Rust · updated today
Get the code
486
GitHub stars
—
New stars this week
34
Forks
A · A · A
License · Quality · Upkeep
81/100
Radar score
What it helps you do
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
Should you use it?
License · A
Permissive license. Free for personal and business use.
Quality · A
Clear README, topics, license and an active community.
Maintenance · A
Updated in the last 30 days.
Job area: Other. Always read the project README before you install, and test on a copy of your data first.
How to start
- 1Open the project on GitHub and read the README.
- 2Run: git clone https://github.com/strands-agents/box.git
- 3Follow the setup steps in the README.
- 4Test with a small task before real work.