Overview
A TypeScript CLI that uses macOS sandbox-exec to restrict apps and AI coding tools so they can access the current project while sensitive areas of the home directory remain blocked.
Why we discovered this
A pragmatic safety net for delegating work to tools such as Claude Code without granting unrestricted filesystem access, built entirely on an operating-system mechanism. The repository is now archived, so maintenance status matters for adoption.
Growth trends
Last 30 days
102 Stars
Trend data is still being collected.
Built with
- TypeScript
Categories and tags
Categories
GitHub Topics
- claude-code
- macos
- privacy
- sandbox
- security
- terminal
- vscode
- cli
- developer-tools
- xcode
GitHub dataView detailed GitHub data
- Stars
- 102
- Forks
- 3
- Watchers
- 1
- Open issues
- 0
- Contributors
- 1
- Primary language
- TypeScript
- License
- MIT
- Repository last updated
- Aug 18, 2026
Explore next
- Sherlock91,396 Stars
A Python OSINT CLI that checks username-based account candidates across social networks.
Python - Trivy37,887 Stars
A scanner for vulnerabilities, SBOM data, misconfigurations, secrets, and licenses across containers, Kubernetes, and repositories.
Go - Web-Check34,771 Stars
An all-in-one website OSINT tool that takes a URL and surfaces DNS, SSL, WHOIS, ports, subdomains, HTTP headers, cookies, technology stack, and many other checks in one interface.
TypeScript - Wireshark9,866 Stars
A packet-analysis platform using a graphical interface and TShark to inspect protocols, filters, and capture files.
C - Vouch5,099 Stars
A community trust-management system where maintainers explicitly vouch for or denounce contributors, with a CLI and GitHub Actions for controlling participation in issues and pull requests.
Nushell
Report incorrect information
Tell us if any listing information is incorrect or outdated.