{"slug":"openshell","name":"NVIDIA OpenShell","nameZh":"OpenShell（NVIDIA 开源 agent 沙箱运行时）","category":"sandbox","categoryName":"Sandboxes & isolation","audience":["for-ai"],"primary":"for-ai","openClosed":"open","pricing":"open-source","license":"Apache-2.0","maintained":"yes","officialUrl":"https://docs.nvidia.com/openshell/latest/","repo":"https://github.com/NVIDIA/OpenShell","latestVersion":null,"latestRelease":null,"stars":19913,"starsAsOf":"2026-10-26","description":"NVIDIA’s open-source safe runtime for autonomous agents (latest stable v0.1.5, 2026-10-20): each agent runs in an isolated sandbox with kernel-level control of file access, system calls and every network connection; before a policy change is applied, formal verification flags risky new access (e.g. reaching a new host with credentials) for human review. Credentials only work at approved endpoints; ships a gateway, Kubernetes Helm deployment, Python/TypeScript/Go/Rust SDKs and agent skills. Needs Docker, Podman or host virtualization","descriptionZh":"NVIDIA 开源的自主 agent 安全运行时（最新稳定版 v0.1.5，2026-10-20）：每个 agent 跑在隔离沙箱里，内核层面管控文件访问、系统调用和每一条网络连接；策略变更生效前先用形式化验证找出会新增的高风险权限（如带凭据访问新主机），交给人审批。凭据只在批准的端点可用；提供网关、Kubernetes Helm 部署、Python/TypeScript/Go/Rust SDK 和给编程 agent 用的技能包。需要 Docker、Podman 或主机虚拟化","callMethods":[],"platforms":["Linux","macOS（Apple Silicon）","Windows（WSL 2，实验性）"],"addedAt":"2026-10-23","updatedAt":"2026-10-26","topics":[],"language":null,"lastPush":"2026-10-24","formerly":null,"packages":[],"recentVersions":[],"alternatives":["firecracker","gvisor","pyodide","e2b","kubernetes","kata-containers","microsandbox","act"],"stacks":[],"scenarios":["safe-agent-execution"],"problems":[],"reasonZh":null,"sources":["editorial","github-pool"],"record":"https://aimap.page/api/v1/software/openshell.json","pages":{"en":"https://aimap.page/en/software/openshell/","zh-hans":"https://aimap.page/zh-hans/software/openshell/"}}