DEDUPED Hot AI repos, turned into use cases Get the Monday 5

How to run a coding agent in a locked-down sandbox with Open Shell

Install Open Shell, create a sandbox and run an agent that must ask before it reaches anything new.

Remote script. The quickstart pipes install.sh from GitHub straight into your shell, so read the script first if you do not want to run it blind.

Who it is forA developer who wants an agent to work autonomously for hours but not touch the rest of the laptop.

The problemAgents are most useful with file, package, API and credential access, which is exactly what makes them risky to leave alone.

The outcomeAn agent working inside an isolated sandbox, with file, system call and network access limited to what a policy allows.

What you need first

  • Linux, macOS on Apple Silicon, or Windows with WSL 2 (experimental)
  • Docker, Podman, or host virtualization
  • An agent to run inside the sandbox; the default image is minimal Ubuntu with no agent installed
  • For Kubernetes: Helm and a CNI that enforces NetworkPolicy

Steps

  1. Run curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | sh to install the CLI and a local gateway
  2. Run openshell sandbox create --name demo to create your first sandbox
  3. Follow the Run Your First Agent guide in the docs, which runs OpenCode against a free OpenRouter model inside the sandbox
  4. When the agent needs new access, approve it from Open Shell instead of granting it up front
  5. Set OPENSHELL_TELEMETRY_ENABLED=false on the gateway if you want to turn off the anonymous telemetry

Prompt for your agent

Install NVIDIA/OpenShell on this machine, create a sandbox named <name> with `openshell sandbox create`, and run <agent> inside it on <task>. Every time it asks for new file or network access, show me the request and wait for my approval before allowing it.

Caveat. Open Shell is at 0.1.x and Windows support goes through WSL 2 and is marked experimental, so expect changes between releases.

Use this in your AI agent

Ask your agent

Using the Deduped MCP, get the setup steps for NVIDIA/OpenShell and "Run a coding agent in a locked-down sandbox"

Add Deduped to Claude Code once

claude mcp add --transport http deduped https://dedupedai.com/mcp

Cursor, ChatGPT, others

Share: X LinkedIn Hacker News Email Copy link

Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer