RepoRadar
Leave a Tip
Item detail

NVIDIA/OpenShell

NVIDIA OpenShell is the safe, private runtime for autonomous AI agents. 7.1k stars, Apache-2.0, Python SDK on PyPI, ships sandboxed execution environments that protect data, credentials, and infrastructure via declarative YAML policies that block unauthorized file access, data exfiltration, and uncontrolled network activity. Alpha status as of 2026-06.

Open source →Back to radar
Score8.0
Popularity82.0
Riskconditional
TierGold
Score breakdown
Usefulness8.0
Novelty9.0
Momentum7.0
Maturity8.0
Open-source/build8.4
Evidence7.2
Workflow potential9.5
Setup ease6.4

Popularity is tracked separately. Support, ads, sponsorships, and tips never affect these signals.

Why it matters

Useful for teams running autonomous agents that handle credentials, sensitive data, or production infrastructure and need declarative policy enforcement rather than ad-hoc sandboxing. Install with `curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | sh` or `uv tool install openshell`.

Who should use it

platform teams running autonomous agents that handle credentials, production data, or infrasecurity teams that need declarative, auditable policy enforcement for agent tool callsengineering teams replacing ad-hoc Docker / VM sandboxes with policy-driven runtime controlcompliance teams that need a single chokepoint to enforce 'no exfiltration, no destructive writes'agent framework authors adding policy enforcement as a runtime layer

Who should skip it

Skip if the source link, docs, or setup requirements do not match your workflow.

Risk explanation

Alpha software as of 2026-06 — expect rough edges, breaking changes, and missing features; Single-player mode today (one developer, one environment) — multi-tenant enterprise deployments are not yet ready; Sits in front of every tool call your agent makes — treat the runtime as a credentialed service and follow standard secret-management practices.

Evidence links

Closest alternatives / related signals

agent-runtimesandboxsecuritypolicy-drivennvidiaapache-2pythonyaml