Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Run AI agents isolated in a macOS user account and sandbox-exec. Configured to run Claude Code, OpenAI Codex, Cursor Agent, Google Gemini.
| Date | Stars |
|---|---|
| 2026-07-31 | 373 |
| 2026-08-02 | 376 |
| 2026-08-06 | 376 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
0.0
growth rate 0.00%/day
# SandVault - Run AI agents and shell commands in a sandboxed macOS user account. Sandboxed web and app testing with Chrome and iOS Simulator. <img src="https://www.codeofhonor.com/images/projects/sandvault.webp" align="left" width="200px"/> SandVault (`sv`) manages a limited user account to sandbox shell commands and AI agents, providing a lightweight alternative to application isolation using virtual machines. </br> </br> - **AI ready** - Includes Claude Code, OpenAI Codex, OpenCode, Google Gemini - **Web and iOS automation** - sandbox access to Chrome / Lightpanda and iOS Simulator - **Fast context switching** - No VM overhead; instant user switching - **Passwordless** - switch accounts without a prompt (after setup) - **Shared workspace** - joint access to `/Users/Shared/sv-$USER` - **Defense in depth** - limited user account + `sandbox-exec` - **Clean uninstall** - Complete removal with `sv uninstall` </br> </br> --- ## Quick Links 0. Run [Browser Automation](#Browser-Automation) from within the sandbox that can be used for testing web interactions. 1. Run [iOS Simulator Automation](#iOS-Simulator-Automation) from within the sandbox that can be used for iOS app testing. 2. To run `xcodebuild` or `swift` see [Sandboxing xcodebuild and swift](#Sandboxing-xcodebuild-and-swift) for details. 3. To run other sandboxed applications inside sandvault, use the `-x` option. See [Sandboxing other apps](#Sandboxing-other-apps) for details. 4. It's not possible to run GUI applications from within the sandbox; see [Running GUI Applications](#Running-GUI-Applications) for details. ## Security Model SandVault has limited access to your computer: - Cannot access your home directory - Runs with standard user privileges - Cannot modify system files - Has no access to mounted drives ``` - writable: /Users/Shared/sv-$USER -- only accessible by you & sandvault-$USER - writable: /Users/sandvault-$USER -- sandvault's home directory - readable: /usr, /bin, /etc, /opt -- system directories - no access: /Users/* -- other user directories - writable: /Volumes/Macintosh HD -- accessible as per file permissions - no access: /Volumes/* -- cannot access mounted/remote/network drives ``` ## Installation Install via Homebrew: ```bash brew install sandvault ``` Install via git: ```bash # Clone the repository git clone https://github.com/webcoyote/sandvault # Option 1: add the sandvault directory to your path export PATH="$PATH:/path/to/where/you/cloned/sandvault" # Option 2: add to your shell configuration for easy access echo >> ~/.zshrc 'alias sv="/path/to/where/you/cloned/sandvault/sv"' echo >> ~/.bashrc 'alias sv="/path/to/where/you/cloned/sandvault/sv"' ``` ## Quick Start ```bash # Run Claude Code in the sandbox # shortcut: sv cl sv claude # Run OpenAI Codex in the sandbox # shortcut: sv co sv codex # Run OpenCode in the sandbox # shortcut: sv o sv opencode # Run Google Gemini in the sandbox # shortcut: sv g sv gemini # Run command shell in the sandbox # shortcut: sv s sv shell ``` ## Connect via SSH The default mode for sandvault runs commands as a limited user (basically `sudo -u sandbox-$USER COMMAND`). Sandvault also configures the limited sandvault account so that you can run commands via SSH (`ssh [email protected]`), and everything works the same. Use the `-s` or `--ssh` option to use SSH mode with `sv`, or use `tmux` or `screen` for users so inclined. ```bash # Run using impersonation # sv COMMAND sv gemini # Run using ssh # sv -s/--ssh COMMAND sv --ssh gemini ``` ## Advanced Commands ```bash # Run AI agent with optional arguments # Usage: # sv <agent> [PATH] [-- AGENT_ARGUMENTS] # Example: sv gemini -- --continue # Run shell command in sandvault and exit # Usage: # sv shell [PATH] -- [SHELL_COMMAND] # Example: sv shell /Users -- pwd # output: /Users # Send input via stdin # Usage: # <
Excerpt of 19,273 characters
Read on GitHubWould you bet a product on this? Bounded 0–100 and slow moving.
matched fp:faba7337df539b30, llm:Description: 'Run AI agents isolated in a macOS user account and sandbox-exec. Configured to run Claude Code, OpenAI Codex, Cursor Agent, Google Gemini.' Topics: claude-code, macos, openai-codex, sandbox
matched fp:faba7337df539b30, llm:Description: 'Run AI agents isolated in a macOS user account and sandbox-exec. Configured to run Claude Code, OpenAI Codex, Cursor Agent, Google Gemini.' Topics: claude-code, macos, openai-codex, sandbox
matched fp:faba7337df539b30, llm:Description: 'Run AI agents isolated in a macOS user account and sandbox-exec. Configured to run Claude Code, OpenAI Codex, Cursor Agent, Google Gemini.' Topics: claude-code, macos, openai-codex, sandbox