afshinm/zerobox
A cross-platform sandbox that secures AI agent command execution by controlling files, network, and credentials.

Zerobox is a process sandboxing SDK and CLI that restricts AI coding assistants like OpenAI Codex from unauthorized file writes, network calls, or credential exposure. It uses a deny-by-default model where allowed paths, domains, and credential injections must be explicitly configured. The project provides multi-language SDKs (Rust, TypeScript, Python) to integrate sandboxing into AI agent workflows, and supports credential injection that only reveals secrets to approved destinations.
Frequently asked
- What is afshinm/zerobox?
- A cross-platform sandbox that secures AI agent command execution by controlling files, network, and credentials.
- Is zerobox open source?
- Yes — afshinm/zerobox is open source, released under the Apache-2.0 license.
- What language is zerobox written in?
- afshinm/zerobox is primarily written in Rust.
- How popular is zerobox?
- afshinm/zerobox has 685 stars on GitHub.
- Where can I find zerobox?
- afshinm/zerobox is on GitHub at https://github.com/afshinm/zerobox.