humanethq/sandbox-check: Verify sandbox isolation from inside containers, pods, and microVMs
Sandbox-check is a zero-dependency Go CLI tool designed to audit sandbox isolation from inside AI agent runtimes, containers, Kubernetes pods, and microVMs. It tests common security failure modes such as cloud metadata leaks, proxy bypasses, unauthorized host service access, and environment secret exposure, returning deterministic exit codes based on its findings. Open article →