humanethq/sandbox-check: Verify sandbox isolation from inside containers, pods, and microVMs

github.com6 min read

Sandbox-check is a zero-dependency Go CLI tool designed to audit sandbox isolation from inside AI agent runtimes, containers, Kubernetes pods, and microVMs. It tests common security failure modes such as cloud metadata leaks, proxy bypasses, unauthorized host service access, and environment secret exposure, returning deterministic exit codes based on its findings. Open article →

More on this topic