{"full_name":"hamza-abili/opencode-sandbox","owner":"hamza-abili","name":"opencode-sandbox","url":"https://github.com/Hamza-Abili/opencode-sandbox","description":"OpenCode V1+V2 command sandbox: native bubblewrap (Linux) / Seatbelt (macOS), read-only system, writable workspace, cleared environment, network denied by default. Fail-closed, zero runtime dependencies.","description_zh":"OpenCode V1 + V2 命令沙箱：每个 shell 命令都在本地 bubblewrap（Linux）或 Seatbelt（macOS）中运行，具有只读系统、可写项目、无环境密钥，且默认禁用网络。V2 内进程保护应用相同的工作区","homepage":null,"topics":["security","workflow","server"],"tag_pages":["security","server","workflow"],"language":"plugin","license":"MIT","avatar":"https://github.com/Hamza-Abili.png","created_at":"2026-11-06T16:51:21Z","pushed_at":"2026-11-12T08:43:28Z","metrics":{"stars":4,"downloads30d":null,"downloads_month":null},"source_repo":"Hamza-Abili/opencode-sandbox","npm_id":"Hamza-Abili/opencode-sandbox","verification":{"status":"skipped","level":"install","run_url":null},"approval":"pending","capabilities":{"findings":["network-call:.github/workflows/upstream-watch.yml","child-process:.github/workflows/upstream-watch.yml","network-call:scripts/smoke.ts","child-process:scripts/smoke.ts","credential-read:src/darwin.ts","credential-read:src/paths.ts","child-process:src/paths.ts","child-process:src/probe.ts","credential-read:src/tool-policy.ts","credential-read:tests/app.test.ts","credential-read:tests/darwin.test.ts","network-call:tests/integration.test.ts","literal-ip:tests/integration.test.ts","child-process:tests/integration.test.ts","credential-read:tests/legacy.test.ts","credential-read:tests/paths.test.ts","child-process:tests/paths.test.ts","credential-read:tests/tool-policy.test.ts"],"red_flags":["credential-read:src/darwin.ts","credential-read:src/paths.ts","credential-read:src/tool-policy.ts","credential-read:tests/app.test.ts","credential-read:tests/darwin.test.ts","credential-read:tests/legacy.test.ts","credential-read:tests/paths.test.ts","credential-read:tests/tool-policy.test.ts"]},"type":"plugin","contains":["plugin"],"deprecated":false,"deprecated_message":null,"maintainers":[],"growth":{"day":{"stars":0,"downloads30d":0,"base_day":"2026-11-12"}},"history":{"dates":["2026-11-12","2026-11-13"],"stars":[4,4],"downloads30d":[0,0],"downloads_month":[null,null]},"boards":{},"same_owner":[{"full_name":"hamza-abili/opencode-agent-plugins","name":"opencode-agent-plugins","boards":{}},{"full_name":"hamza-abili/opencode-claude-hooks","name":"opencode-claude-hooks","boards":{}},{"full_name":"hamza-abili/opencode-integrity","name":"opencode-integrity","boards":{}},{"full_name":"hamza-abili/opencode-telegram-notify","name":"opencode-telegram-notify","boards":{}}],"latest_release":null,"readme":false,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-12T16:49:14Z","history_start":"2026-09-13"}