DEDUPED Hot AI repos, turned into use cases Get 5 a day

What you can do with Box

Strands Box is an open source Rust sandbox engine that restricts what AI agents can execute, read, write, and reach on the network.

Trended earlier

strands-agents/box on GitHub

Third-party repos we don't own or vouch for. AI-generated use cases can be wrong: review everything and run at your own risk.

What do you want to do?

4 use cases

  • Run a coding agent inside a restricted Box sandbox

    Start an agent in a Box sandbox whose file, program, and network access you set in config.

    View prompt
    Using the strands-agents/box repository, download the binaries with its download.sh script, then write a box.toml that gives <agent-name> read access only to <project-folder>. Expected output: `./box-core/box --version` prints a version string and the box starts with the configured grants reported at startup. Verify that the agent cannot read a file outside <project-folder>.

  • Keep API keys away from an agent with credential injection

    Let the egress gateway add API credentials to permitted requests so the agent never sees them.

    View prompt
    In the strands-agents/box repository, read docs/user/security.md and docs/user/policy.md, then configure credential injection for <api-host> in box.toml and policy.dw. Expected output: a permitted request to <api-host> succeeds and the agent's environment does not contain the API key. Verify that a request to a host not in a permit rule is denied.

  • Audit every policy decision an agent made

    Read the OTLP JSON decision records to see what Box allowed and denied during a run.

    View prompt
    In the strands-agents/box repository, run the box with a policy.dw that forbids outbound requests to <host>, then open /private/telemetry/records.jsonl. Expected output: a JSON Lines record showing the denied request to <host>. Verify that a request to an allowed host appears as permitted.

  • Embed Box in a Rust application as a library

    Call strands_box::run from your own Rust host process to start a sandboxed workload.

    View prompt
    Using the strands-agents/box repository, link the strands-box package in crates/box into a Rust host app and call strands_box::run with an absolute path to <box.toml>. Expected output: the function returns an exit code after the agent finishes. Verify that a second run call in the same process fails.

How to use Box

  1. Check you have what it needs: A Mac with Apple silicon running macOS 15 or later; Node.js 22.21 or later from Homebrew, if you follow the getting-started guide; Access to Claude Opus 5 on Amazon Bedrock in us-west-2, if you follow the getting-started guide.
  2. Open strands-agents/box on GitHub and read the README and license.
  3. Confirm you have a Mac with Apple silicon and macOS 15 or later.
  4. Run curl -fsSL https://raw.githubusercontent.com/strands-agents/box/main/download.sh | sh
  5. Run ./box-core/box --version to confirm the binaries unpacked into ./box-core.
  6. Edit Box.toml to set the agent command and direct file and network grants, and edit policy.dw to set rules for operations Box checks.

These steps come from our top use case, Run a coding agent inside a restricted Box sandbox, which also has a copy-paste agent prompt.

Box alternatives · Best AI repos for Security and science

About this repo

  • Who it is forDevelopers and security-minded teams who want to run AI agents with enforced file, program, and network limits on a Mac with Apple silicon.
  • Why it is hot
  • LanguageRust
  • Sourcegithub.com/strands-agents/box · Back to Hot repos

Requirements

  • A Mac with Apple silicon running macOS 15 or later
  • Node.js 22.21 or later from Homebrew, if you follow the getting-started guide
  • Access to Claude Opus 5 on Amazon Bedrock in us-west-2, if you follow the getting-started guide
  • A Rust toolchain via rustup, only if you build from source
Maintain Box? Add the Featured on Deduped badge

Paste this into your README:

[![Featured on Deduped](https://dedupedai.com/badge/strands-agents-box.svg)](https://dedupedai.com/use-cases/strands-agents-box/?ref=badge)

More badge styles and HTML

Questions about Box

What is Box?

Strands Box is an open source Rust sandbox engine that restricts what AI agents can execute, read, write, and reach on the network. It is an open-source project on GitHub: https://github.com/strands-agents/box.

Who is Box for?

Developers and security-minded teams who want to run AI agents with enforced file, program, and network limits on a Mac with Apple silicon.

What can I do with Box?

4 use cases so far, for example: Run a coding agent inside a restricted Box sandbox; Keep API keys away from an agent with credential injection; Audit every policy decision an agent made. Each has steps and a copy-paste agent prompt.

What do I need to run Box?

A Mac with Apple silicon running macOS 15 or later; Node.js 22.21 or later from Homebrew, if you follow the getting-started guide; Access to Claude Opus 5 on Amazon Bedrock in us-west-2, if you follow the getting-started guide; A Rust toolchain via rustup, only if you build from source.

What are alternatives to Box?

Other hot AI repos in Security and science: Rea, Reverify, Ablation, Claude AD, Awesome Reverse Engineered.

Is Box safe to run?

Deduped does not own, audit or vouch for it. Read the README and license, run it on your own systems first and review every command before you run it.