Sandboxing & Tool Execution

Translation pending

This page has not been translated yet. Please read the Chinese version.

1. Intuition and Motivation

2. The Spectrum of Isolation Strength

3. OS-Native Sandboxes: The Lightweight Path for Local Agents

4. Containerized Runtimes: OpenHands' Action-Execution Server

5. Prompt Injection: The Seam Sandboxes Cannot Hold

6. Comparison with Baselines

7. Implementation Notes

8. Tuning and Practical Experience

9. References