Sandbox, Security & Governance tools for opencode

6 projects · 6 with stars to rank by · 7,636 combined stars · snapshot 2026-11-01

Isolation, permissions, approval gates, guardrails, compliance and audit — plus the security agents that attack and defend.

Built for the opencode agent: its plugins, themes, agents and surrounding projects.

Filter this live on the atlas →

Runs on: Windows WSL2 macOS Linux Docker

#ShotProject StarsPlugs into What it doesLang / licence / push
1T3MP3STelder-plinius/T3MP3ST6,653
1 list
Claude CodeClaude / AnthropicopencodeCodex / OpenAILocal / Ollama
Multi-agent offensive-security meta-harness (July 2026) that turns the coding agent you already run — Claude Code, Codex, OpenCode, or a fully offline Ollama/vLLM model — into an autonomous kill-chain hunter (recon → exploit → report) across web apps, CTFs, smart contracts, and source code. The key harness insight is keyless composition: your existing agent is the brain, and the harness bolts coor
git clone https://github.com/elder-plinius/T3MP3ST.git
TypeScript
AGPL-3.0
2026-09-08
2Open AgentTh0rgal/orb696
2 lists
Claude CodeClaude / AnthropicopencodeMCP
Self-hosted control plane for Claude Code with isolated container workspaces and real-time mission streaming
git clone https://github.com/Th0rgal/openagent.git
Rust
—
2026-11-01
3Gryphsafedep/gryph182
1 list
Claude CodeClaude / AnthropicopencodeGemini / GoogleCursor
by SafeDep - Gryph is a security layer for AI coding agents. It hooks into Claude Code and enforces YAML policy rules that block, warn, or guide actions in real time, then logs every event to a local SQLite database for review and audit
npm install -g @safedep/gryph
Go
Apache-2.0
2026-10-25
4Brood Boxstacklok/brood-box79
6 lists
Claude CodeClaude / AnthropicopencodeMCPCodex / OpenAI
Run AI coding agents (Claude Code, Codex, OpenCode) inside hardware-isolated microVMs with snapshot isolation, egress control, and MCP authorization
git clone https://github.com/stacklok/brood-box.git
Go
Apache-2.0
2026-10-30
5aicontainerstefanoginella/aicontainer21
1 list
Claude CodeClaude / AnthropicopencodeCodex / OpenAI
by stefanoginella - Sandboxed devcontainer for running Claude Code, Codex, and OpenCode in bypass / auto-approve mode
npm install -g aicontainer
Shell
MIT
2026-10-28
6libops/cli-sandboxlibops/cli-sandbox5
1 list
Claude CodeClaude / AnthropicopencodeCodex / OpenAIGemini / Google
Docker sandbox container for Claude Code, Codex, Gemini CLI, and OpenCode
git clone https://github.com/libops/cli-sandbox.git
Shell
—
2026-10-29