kstenerud / yoloai
Your agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right.
Why this job: matched by what the repo talks about: security, agent, sandbox, risk
What it does
- Six backends. Docker, Podman, containerd (Kata), Apple Container, Tart, and Seatbelt. Runs on Linux, macOS, and Windows (WSL2).
- Selectable isolation strength per sandbox, from runc through gVisor up to Kata VMs (QEMU or Firecracker).
- Network policy per sandbox. open, allowlist, or none.
- Minimal environment inside the sandbox. Anything from the host is an explicit opt-in (--env, --dir).
- Resource limits (--cpus, --memory) and port forwarding (--port).
Get started
brew install --cask kstenerud/tap/yoloai - Maintenance
- Active
- Last commit 29 days ago
- Stars
- 252
- +28 this week
- Licence
- MIT
- Allows business use
- Downloads for
- 2 systems
- Mac, Linux
- Latest version
- v0.12.0
- Released 2 months ago
- Built with
- Go
- 87% of the code
Is it looked after?
- Contributors
- 1
- Last 90 days
- Issues
- 20% closed
- 8 still open
- Pull requests
- 8 merged
- 4 waiting
- Releases
- 10
- 10 in the last year
- Contributing guide (opens in new tab)
- Security policy (opens in new tab)
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| sunnysktsang / hermes-suite | 127 | 19 days ago | MIT | No downloads |
| dredozubov / hazmat | 180 | 13 days ago | MIT | Mac |
| strands-agents / box | 512 | yesterday | Apache-2.0 | Mac, Linux |
More: download files, languages, topics and project record
Download files, v0.12.0
- Mac4 files, 18 downloads
- Linux8 files, 47 downloads
Languages
- Go 87%
- Python 11%
- Makefile 1%
- Shell <1%
Topics
- ai
- ai-agents
- aider
- claude
- codex
- docker
- gemini
- opencode
- permission
- podman
- sandbox
- seatbelt
Project record
- JobAI security
- StatusListed
- Commits2,832
- Forks15
- Watching2
- Stars in 28 days+31
- CreatedFeb 24, 2026
- First seen by usNov 7, 2026
- CheckedNov 9, 2026