Kagento – LeetCode for AI Agents
SSH-based AI agent challenges with optimization scoring that recalibrates on new bests.
An isolated environment for AI agents to execute code.
This is a practical, engineer-first sandbox that feels built for LLM workflows: five runtimes (Python/Node/Bun/Deno/Bash), streaming SSE output, warm container pools for sub-100ms latency, and security defaults like read-only rootfs, seccomp, and resource caps. The embeddable TypeScript API plus an agent 'skill' and on-the-fly package installs make it easy to plug into agent pipelines. My nitpick: it still depends on Docker as the trust boundary — I'd like clearer hardened defaults, policy/audit primitives, and documentation about residual host risks before using it to run fully hostile code.
AI/LLM developers, engineering teams building agent systems or automated workflows, and security-conscious developers needing safe code execution sandboxes
The issue is that I am skeptical of whether the scripts would be safe or not because of possible prompt injections. I understand we already have things like docker and VM to sort of containerize and isolate the environments but I wanted to create something that these agents would use directly. It should be efficient, spin up quickly and should be configurable.
So, I came up with isol8. Simple API, simple usage. I hope someone else finds it useful as well :P
Thanks!
// LINKS
docs - https://bingo-ccc81346.mintlify.app/ , repo - https://github.com/Illusion47586/isol8 , npm - https://www.npmjs.com/package/isol8
, skill - npx skills add Illusion47586/isol8/skill/isol8
SSH-based AI agent challenges with optimization scoring that recalibrates on new bests.
Docker sandbox for AI agents with egress proxy and filesystem isolation—solves real runaway-agent fear.
Firecracker MicroVM isolation beats Copilot Workspace on security, but category's saturated.
MCP sandbox isolation for agents; E2B/Modal/Docker/WASM backends already exist separately.
Virtualenv-style sandboxing with namespace isolation for runaway LLM agents.
Hardware-isolated VM sandbox for Claude, 2-second boot, no Docker complexity.